Account and workspace access
Pliget uses authenticated sessions and workspace permissions. Access to administrative resources must be checked by the server, rather than inferred from what a page displays.
Uploaded content
The media pipeline restricts accepted formats and sizes and validates uploads on the server. Hosted media is intended for public widget delivery; do not upload confidential documents expecting private storage.
External services
Storage, billing and messaging can rely on third-party infrastructure. Consult our Privacy Policy and Subprocessors page for information about processing; not every optional integration is active on every deployment.
Report a vulnerability
Please use the Contact page to privately report a suspected security issue. Include the affected URL, steps to reproduce and impact; do not include passwords or third-party private data.
No implied certification
This overview is not a claim of SOC 2, ISO 27001 certification, a penetration-test result or any guaranteed availability SLA.