Tenant isolation
Tenant data is scoped server-side. Public rendering uses sanitized content responses rather than direct database access.
Security
Security and control model
Olysite is designed around controlled editing, tenant isolation, private previews, service-only public content endpoints, and operator-managed production practices.
Control model
Security begins with narrow, server-enforced boundaries.
This overview describes product controls, not a certification claim. Olysite does not publish unsupported compliance badges, uptime SLAs, or detailed infrastructure diagrams on the public site.
Draft safety
Draft content stays private until published. Preview routes require signed, short-lived preview links.
Safe editing
Customers edit approved fields. Raw HTML, CSS, JavaScript, arbitrary layout changes, and unsafe media types are not customer-editable.
Operations posture
The current production posture includes health checks, external monitoring, backup verification, and manual release and rollback gates.