Security
This page summarizes the security practices behind Accelerate. It is designed for customers reviewing the platform before using it on a live website.
Last updated: May 10, 2026
Accelerate is operated on reputable managed cloud services with encrypted network traffic, access controls, backups, and operational monitoring. We avoid publishing detailed architecture or internal implementation information publicly for security reasons.
Dashboard access requires authenticated user sessions. Workspace data is scoped by account ownership and server-side authorization checks. Administrative access is limited to operational needs and should be used only by authorized personnel.
Customer-supplied AI and integration keys are protected using server-side safeguards and encrypted secret storage where configured. Secrets are never intentionally exposed in public pages, client logs, or exported reports.
Payments, subscriptions, tax calculation, invoices, card details, and checkout are handled by Paddle. Accelerate does not store full card numbers or card security codes.
Prompts, conversations, uploaded files, website imports, and knowledge content may be sent to configured AI providers to generate answers. Customers should avoid uploading regulated, highly sensitive, or unnecessary personal data unless they have a lawful basis and appropriate controls.
Accelerate uses operational logs, rate limits, audit records, and monitoring to investigate abuse, troubleshoot reliability issues, and protect the service. Logs may include IP address, browser metadata, request paths, user identifiers, and error context.
If we become aware of a security incident involving personal data, we will investigate, contain the issue, and notify affected customers or regulators when required by applicable law.
Customers are responsible for strong passwords, protecting account access, managing team permissions, reviewing AI output, keeping website notices accurate, and making sure uploaded content and visitor data are lawful to process.