{"ok":true,"product":"Site Rep","updatedAt":"2026-05-31","status":"beta_with_confirmed_controls","certificationStatus":"not_certified","trustPage":"/trust","privacyPage":"/privacy","termsPage":"/terms","releaseStatus":{"marker":"sitegpt-parity-trust-demo-monitor-2026-05-31","branch":"010-sitegpt-parity","stage":"candidate_pending_production_proof","updatedAt":"2026-05-31","publicTrustUpdatedAt":"2026-05-31","source":"worker-code"},"confirmedControls":[{"area":"Grounded answers","status":"confirmed","evidence":"Public widget answers from approved sources and refuses unsupported questions."},{"area":"Owner visibility","status":"confirmed","evidence":"Owner workspace includes conversations, leads, source gaps, install health, exports, notifications, and deletion-review requests."},{"area":"Access control","status":"confirmed","evidence":"Admin, customer, owner, developer API, and public widget surfaces are separated by server-side checks."},{"area":"Paid unlock","status":"confirmed","evidence":"Dodo and Razorpay activation paths require server-verified payment records before workspace unlock."},{"area":"Abuse controls","status":"confirmed","evidence":"Public signup, chat, lead, install, feedback, payment, and developer API routes have rate limits."},{"area":"Storage boundary","status":"confirmed","evidence":"Durable Object primary store, D1 ledgers, private R2 source content, and bounded KV mirror are server-side."},{"area":"Public source imports","status":"confirmed","evidence":"Website crawl, exact URL list, readable public cloud links, RSS/Atom feeds, source files, and FAQ exports import through server routes with source receipts."}],"dataMap":[{"data":"Approved website sources","purpose":"Answer visitors from proof and support source-health checks.","ownerControl":"Edit, replace, audit, export, and roll back supported snapshots."},{"data":"Visitor conversations and feedback","purpose":"Show owner inbox, proof gaps, quality checks, and follow-up needs.","ownerControl":"Review and export from the private workspace."},{"data":"Lead details","purpose":"Let the site owner follow up with a visitor who asked for help.","ownerControl":"Review, status, notes, follow-up dates, and CSV export."},{"data":"Payment and billing records","purpose":"Verify checkout, activation, billing portal access, renewals, and plan status.","ownerControl":"Billing portal for Dodo-linked customers; manual support fallback through hello@siterep.net."},{"data":"Operational events","purpose":"Show install proof, source health, quota warnings, notification receipts, and errors.","ownerControl":"Dashboard visibility, owner queue, notifications, and exports."}],"notClaimed":["SOC 2 Type II","GDPR certification","HIPAA compliance","BAA coverage","DPA availability","zero retention","no-training-on-data status","native OAuth marketplace integrations","private cloud folder sync","full helpdesk replacement","two-way CRM sync","automated workflow execution","guaranteed conversion lift","guaranteed setup time","enterprise omnichannel coverage"],"needsReview":[{"area":"Legal and compliance","status":"needs_review","evidenceNeeded":"Privacy policy, DPA, BAA, subprocessor list, retention windows, deletion fulfillment, and regional data-rights review."},{"area":"Provider retention","status":"needs_review","evidenceNeeded":"Verified model, payment, email, Cloudflare storage, and backup retention settings."},{"area":"Production release","status":"needs_review","evidenceNeeded":"Cloudflare dry run, deploy freshness, live monitor proof, real customer install proof, and real-card paid unlock proof."},{"area":"Native integrations","status":"needs_review","evidenceNeeded":"OAuth scopes, consent screens, marketplace approval, audit logs, and rollback-safe ticket or CRM writes."}],"support":{"email":"hello@siterep.net","deletionReview":"Owners can open a deletion-review request in the workspace; it is tracked for review and is not instant erasure."},"configuredSignals":{"dodoProductsConfigured":true,"notificationsConfigured":true,"publicBaseUrl":"https://siterep.net"}}