Our agents look at your store. They never get the keys to it.
How Atelier by Pilea protects your data and your store while Alex, Felix and Marco work on it.
Agents browse your store the way a shopper would
Nothing is installed on your site, nothing is integrated into your stack, and no one needs to grant Atelier access to your admin. An agent opens your pages in a browser, like a visitor, and reports what it sees.
What agents access
- Public pages: home, collections, product pages
- Cart and checkout flows, up to the payment step
- Promo codes and banners that are publicly available
- Pages behind a login only when you set it up and scope it with us
What agents never do
- Place orders or enter payment details
- Access your customers' personal data
- Touch your backend, database or admin panel
- Ask for admin credentials or write access
- Install anything on your infrastructure
Google Cloud Platform
Atelier runs on Google Cloud Platform. Traffic is encrypted with HTTPS/TLS, production access is limited to authorized team members, and services run as managed containers rather than long-lived servers.
Proof, then a second check
Every issue carries its screenshot, URL and device, and a second agent re-checks the most important findings on a fresh session. On Monitor plans, Pilea's QA team also reviews findings. Reviewers see your public pages and the findings, nothing more.
GDPR and SOC 2
We are committed to GDPR compliance for EU customers, and a DPA is available on request. Pilea has begun pursuing SOC 2 compliance. In the meantime, our program relies on infrastructure access controls and data minimization.
Subprocessors
Each provider receives only the data it needs to do its job. The full list and our DPA are available on request.
| CATEGORY | PROVIDER | WHAT IT RECEIVES |
|---|---|---|
| Cloud hosting | Google Cloud Platform (Google LLC) | Account data, run results, agent conversations |
| AI model providers | Anthropic, OpenAI, Google | Content of the public pages being analyzed and your questions to the agents |
| Authentication | Supabase; Google sign-in when you choose it | Name and work email |
| Payments (self-serve plans) | Stripe | Billing details. Card numbers are handled by Stripe and never stored by Pilea |
Pilea France SAS
Billing for French and EU customers is handled by Pilea France SAS, 679 Avenue de la République, 59800 Lille, France.Have a security questionnaire?
Send it, or ask for our DPA and subprocessor list. We reply within one business day.
Email founders@pilea.co