Snapshot 224663
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to main content Security Security and privacy at cside Security and privacy run in our veins. We secure 3rd party scripts with a mix of technology and AI expertise to protect B2B SaaS, e-commerce, and websites that use third-party scripts. Posture Governance At cside, we prioritize the security and privacy of our users. We are committed to protecting your personal information and ensuring a safe environment for all our services. Each cside employee is tasked with maintaining compliance with applicable frameworks. We hold each other accountable and use tools to continuously monitor and audit our actions and systems. Principles Our policies are based on the following foundational principles: 01 Least Privilege Access Access is limited to those with a legitimate business need and granted based on the principle of least privilege for the minimum time required. 02 Defense-in-Depth Security controls are implemented and layered according to the principle of defense-in-depth 03 Consistency Security controls are applied consistently across all areas of the enterprise. 04 Continuous Improvement The implementation of controls is iterative, continuously maturing across the dimensions of improved effectiveness, increased auditability, and decreased friction. Compliance Compliance and Certifications We undergo audits and receive certification from leading third-party standards. trust.cside.com GDPR SOC 2 PCI DSS Encryption Data Protection Data at Rest All customer data stored in our systems, including S3 buckets, is encrypted at rest. Sensitive tables and collections use row-level encryption, which means your data is protected even before it reaches the database. Physical or logical access alone isn't enough to read the most sensitive information. Data in Transit Whenever data moves across potentially insecure networks, cside protects it using TLS 1.2 or higher. We also implement HSTS (HTTP Strict Transport Security) to add another layer of protection. TLS keys and certificates are securely managed by AWS and deployed through Application Load Balancers. Secret Management Encryption keys are handled through AWS KMS and stored in secure hardware modules (HSMs), inaccessible to both Amazon and cside staff. Keys are only used through KMS APIs for encryption and decryption. Application secrets are safely stored in AWS Secrets Manager and Parameter Store with strict access controls. AI Security Open Source AI and Zero Data Leakage cside runs all large language models (LLMs) on our own private cloud, so your data is never exposed to third-party AI providers. Air-Gapped AI Models Our open source LLM models run in a completely isolated environment with no internet access, preventing any chance of accidental or unauthorized data leaks. Self-Hosted on Private Cloud All AI processing happens safely inside our own infrastructure. Unlike other services that send data to external AI providers through their API, your data never leaves our secure environment. Open Source Transparency We maintain full visibility and control over how our AI works by using open-source models. This means we can audit, verify, and ensure the security of our AI-powered features, no black-box solutions required. CONTACT US Browser-layer visibility for every visitor, human or agentic. WHAT CSIDE COVERS How to achieve PCI DSS requirement 6.4.3 & 11.6.1 compliance in 1 day Why third-party scripts are a security risk for you and your visitors Monitoring privacy and consent leakage (GDPR, CCPA) across every third party Stopping signup abuse, account sharing, and chargeback fraud with device intelligence Detecting and controlling AI agents and bots hitting your site in real time By checking this box, you consent to receive communications from cside Book a demo