PrivacyTrust by design

Operate with visibility — without careless data exposure.

See how Sitewrap builds privacy into request logs, live users, tracking, and security: masked IPs, consent-gated storage, tenant separation, and a SOC 2-aligned control program.

Privacy-aware operations Masked analytics Consent-gated storage Security retention windows

Masked analytics by default

Request logs and live views show coarsened IPs so teams can operate without spreading full addresses across everyday dashboards.

  • IPv4 shown as /24-style values by default
  • IPv6 coarsened to /48-style values
  • Full IPs reserved for authorized security workflows

Consent-aware visitor identity

Persistent visitor IDs, durable A/B storage, Mixpanel, and GA4 stay behind consent. Without it, Sitewrap uses short-lived matching only for the active live session.

  • Works with common consent cookies and Borlabs
  • GA4 Consent Mode defaults supported
  • No long-term profile building without consent

Tenant separation and least access

Each website runs in its own Sitewrap tenant boundary. Dashboard access, audit trails, and security views are designed so operators only see what they are authorized to manage.

  • Per-site configuration and data stores
  • Role-aware dashboard access
  • Security retention kept purposeful and short where possible
SOC 2 Trust program

A SOC 2-aligned control program for website operations.

Sitewrap is building and operating security, availability, and confidentiality controls that map to SOC 2 expectations — so procurement, security, and agency teams can evaluate the platform with clearer evidence.

Security

Access, logging, and edge protection

Dashboard authentication, tenant boundaries, firewall controls, audit events, and least-privilege operator workflows reduce accidental exposure.

Availability

Operational visibility when sites matter

Health checks, request-source labels, cache and deploy controls help teams keep production websites online and diagnosable.

Confidentiality

Data minimization in the product UI

Masked analytics, consent-gated persistence, and short security retention windows keep everyday operations from oversharing visitor data.

Need a security review pack?

Ask for the current SOC 2 program status, security questionnaire support, Privacy Policy, and DPA for your diligence process.

Are you SOC 2 certified?

Sitewrap runs a SOC 2-aligned control program covering security, availability, and confidentiality practices. Contact us for the current status, security questionnaire, or report availability for your procurement process.

Do customers still need their own privacy notice?

Yes. When Sitewrap runs in front of your website, you remain responsible for your visitor notices, consent banner, and lawful bases. Sitewrap provides the technical controls; you provide the customer-facing disclosures.

What happens without tracking consent?

Partner tracking and persistent visitor storage stay off. Sitewrap can still use short-lived server-side matching so operators can understand an active live session without building a durable advertising-style profile.

Wrap your website with privacy-aware operations.

Create a Sitewrap account to get masked analytics, consent-aware tracking, and edge security in one place — then review the legal docs when you need them.