source url: https://www.lightsite.ai/security-and-trust
canonical url: https://www.lightsite.ai/security-and-trust
page title: LightSite AI Security & Trust — EU Data Residency, Encryption
last synced at: 2026-08-31T13:24:02.177Z
representation: LightSite AI Security & Trust
  type: WebPage
  about: Platform Architecture
  about: Data Handled by the Website Integration
  about: Data Residency and Infrastructure
  about: Encryption and Access Controls
  about: Security Testing and Vulnerability Management
  about: AI and Model Training
  about: Availability and Customer Impact
  about: Enterprise Security Reviews
  has part: Platform Architecture
    type: WebPageElement
    text: LightSite AI runs as a parallel AI-search infrastructure and analytics layer. It deploys machine-readable resources such as AI sitemaps, structured endpoints, JSON-LD, agent manifests and Skills API endpoints, and measures how AI crawlers and AI-referred visitors interact with a customer's site. Normal page traffic is not proxied through LightSite AI, so a LightSite outage does not take the customer's website down. [Excerpt — full section text is in articleBody.]
    is part of: articleBody
  has part: Data Handled by the Website Integration
    type: WebPageElement
    text: The integration processes publicly available website content and technical event data about AI crawler activity, AI extraction, Skills API usage and AI-referred visits. It is designed to operate without cookies, local storage or browser fingerprinting, and not to collect visitor names, email addresses, credentials, payment data or form contents. Account and administrative information for authenticated platform users is handled as described in the [Privacy Policy](https://www.lightsite.ai/privacy-policy) .
  has part: Data Residency and Infrastructure
    type: WebPageElement
    text: The primary production database is hosted in Frankfurt, Germany on AWS infrastructure. Managed cloud providers support database, authentication, hosting, communications and AI processing. A current sub-processor list is available at support@lightsite.ai .
  has part: Encryption and Access Controls
    type: WebPageElement
    text: Controls include encryption in transit using TLS 1.2 or higher and encryption at rest, organization-scoped access controls and tenant isolation, least-privilege internal administrative access, managed secrets and credential controls, multi-factor authentication and Microsoft Entra ID SSO support, and logging and monitoring of authentication, application and system activity.
  has part: Security Testing and Vulnerability Management
    type: WebPageElement
    text: LightSite AI uses managed infrastructure, dependency and code security scanning, vulnerability management, and controlled production deployment practices. Independent security testing and external security or architecture reviews are performed as appropriate, and enterprise security documentation is available on request.
  has part: AI and Model Training
    type: WebPageElement
    text: LightSite AI does not use Customer Data to train general-purpose AI models and does not provide Customer Data to third-party AI providers for model training. Publicly available information and anonymized, aggregated, de-identified or derived data that does not identify a customer, individual or confidential information may be used to develop, test, evaluate and improve the Services.
  has part: Availability and Customer Impact
    type: WebPageElement
    text: Because the LightSite layer sits alongside the customer's website rather than in front of it, machine-readable endpoints and analytics may be unavailable during an outage while the customer's primary website remains available. Availability and support commitments are in the [Service Level Agreement](https://www.lightsite.ai/service-level-agreement) .
  has part: Enterprise Security Reviews
    type: WebPageElement
    text: For enterprise procurement, LightSite AI can provide a detailed Security Overview, respond to security questionnaires and supply supporting materials. Customer-specific commitments must be agreed in the applicable Order Form. Enterprise teams can also review [AI search infrastructure for enterprises](https://www.lightsite.ai/best-ai-visibility-tools-for-enterprise) .
  has part: Contact
    type: WebPageElement
    text: Security questions and documentation requests: support@lightsite.ai . See also the [Privacy Policy](https://www.lightsite.ai/privacy-policy) , [Terms and Conditions](https://www.lightsite.ai/terms-and-conditions) and [Data Processing Addendum](https://www.lightsite.ai/data-processing-addendum) .
  provider: LightSite AI
  word count: 543
  language: en
  article body: # LightSite AI Security & Trust This page summarizes the security, privacy and data-handling practices of Lightsite Ltd., operating as Lightsite AI. It is general information and does not modify the [Terms and Conditions](https://www.lightsite.ai/terms-and-conditions) , the [Data Processing Addendum](https://www.lightsite.ai/data-processing-addendum) , or any Order Form. Last updated 6 August 2026. ## Platform Architecture LightSite AI runs as a parallel AI-search infrastructure and analytics layer. It deploys machine-readable resources such as AI sitemaps, structured endpoints, JSON-LD, agent manifests and Skills API endpoints, and measures how AI crawlers and AI-referred visitors interact with a customer's site. Normal page traffic is not proxied through LightSite AI, so a LightSite outage does not take the customer's website down. The standard integration is a lightweight JavaScript snippet plus LightSite-specific redirects or discovery rules, and requires no database credentials or privileged access to internal systems. ## Data Handled by the Website Integration The integration processes publicly available website content and technical event data about AI crawler activity, AI extraction, Skills API usage and AI-referred visits. It is designed to operate without cookies, local storage or browser fingerprinting, and not to collect visitor names, email addresses, credentials, payment data or form contents. Account and administrative information for authenticated platform users is handled as described in the [Privacy Policy](https://www.lightsite.ai/privacy-policy) . ## Data Residency and Infrastructure The primary production database is hosted in Frankfurt, Germany on AWS infrastructure. Managed cloud providers support database, authentication, hosting, communications and AI processing. A current sub-processor list is available at support@lightsite.ai . ## Encryption and Access Controls Controls include encryption in transit using TLS 1.2 or higher and encryption a…
  article lead: This page summarizes the security, privacy and data-handling practices of Lightsite Ltd., operating as Lightsite AI. It is general information and does not modify the [Terms and Conditions](https://www.lightsite.ai/terms-and-conditions) , the [Data Processing Addendum](https://www.lightsite.ai/data-processing-addendum) , or any Order Form. Last updated 6 August 2026.
  description: How LightSite AI protects your data: EU data residency in Frankfurt, TLS and at-rest encryption, tenant isolation, SSO, and no model training on customer data.
  related link: https://www.lightsite.ai/terms-and-conditions
  related link: https://www.lightsite.ai/data-processing-addendum
  related link: https://www.lightsite.ai/privacy-policy
  related link: https://www.lightsite.ai/service-level-agreement
  related link: https://www.lightsite.ai/best-ai-visibility-tools-for-enterprise
  main entity of page: https://www.lightsite.ai/security-and-trust
verification url: https://api.llm-discovery-api.com/functions/v1/llm-discovery/public/canary/3e8afd97e69d4e7ea721c135

LightSite AI
type: Organization
slogan: AI Search Infrastructure and Execution Layer
address: PostalAddress
  address country: IL
  address locality: Tel Aviv
founder: Stas Levitan
area served: Worldwide
description: LightSite AI is an AI search visibility and execution platform that helps teams track AI crawler behavior, AI-referred traffic, brand visibility, structured-data gaps and approved technical fixes across ChatGPT, Gemini, Claude, Perplexity and Google AI Overviews.
contact point: ContactPoint
  contact type: Sales
founding date: 2024
founding location: Tel Aviv, Israel

Stas Levitan
type: Person
job title: CEO & Founder
works for: LightSite AI

LightSite AI — AI Search Infrastructure and Execution Layer
type: WebSite
publisher: LightSite AI
language: en-US
description: Closed-loop AI search operating layer: machine-readable infrastructure, measured AI behavioral data, competitor gap detection, and technical visibility fixes.
potential action: SearchAction
  target: EntryPoint
    url template: https://www.lightsite.ai/ai-query
  query-input: required name=search_term_string

LightSite AI
type: SoftwareApplication
publisher: LightSite AI
description: AI search infrastructure and execution layer for websites. Deploys a machine-readable discovery layer (structured endpoints, JSON-LD, AI sitemaps, agent manifests, Skills API), captures measured AI crawl and query behavior, detects competitor gaps by query cluster, and executes the technical and visibility fixes. Closed-loop, not a dashboard.
operating system: Web
application category: BusinessApplication

LightSite AI Security & Trust — EU Data Residency, Encryption
type: WebPage
about: LightSite AI
is part of: LightSite AI — AI Search Infrastructure and Execution Layer
breadcrumb: breadcrumb
language: en
description: How LightSite AI protects your data: EU data residency in Frankfurt, TLS and at-rest encryption, tenant isolation, SSO, and no model training on customer data.

breadcrumb
type: BreadcrumbList
item list element: Home
  type: ListItem
  item: https://www.lightsite.ai/
  position: 1
item list element: LightSite AI Security & Trust — EU Data Residency, Encryption
  type: ListItem
  item: https://www.lightsite.ai/security-and-trust
  position: 2