How WideView keeps your sites safe
WideView connects to the systems that run your operation, so every connection is scoped, encrypted and logged.
Draft for legal review. Last updated October 26, 2026.
Pick a system to see how it connects, then try to change something.
Activity log
People approve every action
By default, nothing changes in your systems until a person approves it. You can allow small, routine actions to run inside limits you set. Every action is logged with who approved it and why, and can be reversed.
Least access
- Read only by default. Write access only for the actions you approve.
- A separate, scoped credential for every connector.
- Credentials are encrypted and never shown in the interface.
- The Chrome extension uses your team's existing login and never stores passwords.
Network
WideView never needs inbound access to your network. Cloud software connects through its own API over TLS. Machines on site connect through a WideView gateway, software on a computer you already have, which connects out over TLS.
Encryption
Data is encrypted in transit with TLS 1.2 or higher and at rest with AES-256.
Where it runs
- Our cloud, hosted in the United States.
- Your cloud: AWS, Microsoft Azure or Google Cloud.
- On premises, inside your network.
- Fully offline and air gapped, for defense and regulated sites.
Identity
Single sign on with SAML or OpenID Connect, multi factor authentication, and roles that decide who can see, approve and change what.
Your data
Your data is used to run your sites and is deleted when you ask. We never use it to train models for anyone else.
Compliance
We will list audits and certifications here as they complete. Ask us for our current security overview.
Report a vulnerability
Please give us a reasonable time to fix an issue before you share it. We will not take legal action against good faith research.