Hosting and infrastructure
SiteInTen runs on established cloud infrastructure providers. Published sites are served over a content delivery network for speed and reliability. We keep our platform patched and updated as part of normal operations.
Encryption in transit
Traffic to SiteInTen and to sites published with it is served over HTTPS, so data is encrypted in transit between browsers and our servers. Custom domains you connect are served over HTTPS as well.
Storage and access
Uploaded media and stored content are kept in private storage, and access to private resources uses signed, time-limited access where applicable rather than being openly public. Internally, we apply role-based access so team members and services only reach what they need.
Payments
Payments are processed by Stripe. Card details are handled by Stripe directly, and SiteInTen does not store full card numbers. This keeps sensitive payment data with a specialized, dedicated processor.
Backups and retention
We maintain operational backups of platform data to support recovery, and we retain data consistent with our Privacy Policy. Backups are intended for resilience, not indefinite storage of deleted content.
Responsible disclosure
If you believe you have found a security vulnerability, we would like to hear from you before disclosing it publicly. Email us at security@siteinten.com with the details and steps to reproduce, and please give us a reasonable amount of time to investigate and fix the issue. We appreciate good-faith research and will not pursue researchers who act responsibly and avoid harming users or data.
Honest limitations
No product can promise perfect security, and we will not pretend otherwise. SiteInTen does not currently hold formal certifications such as SOC 2, ISO 27001, or HIPAA, and we will not claim them until they are earned. We focus on practical safeguards, honest communication, and continual improvement, and we will update this page as our practices evolve.
Contact
Security questions or reports? Email security@siteinten.com.