Careful with your website. Strict with your data.
LayerAdapt works on real, live websites and real business databases. Every part of it was designed so that nothing can break quietly and nothing leaves your control.
Changed only where content lives, and always reversible.
- Sensitive filesFiles that handle logins, payments, admin areas, settings and form sending are never edited. Files that contain a password or key are never changed or shown.
- DesignLayout, styles and scripts are not touched. Only the places that show content are connected to your tables.
- Checked firstBefore anything is published, LayerAdapt rebuilds every page and compares it with the original, so the design never changes by accident.
- BackupsEvery version of every file is kept. A backup is taken before each publish, and any version can be put back.
- No surprisesBefore publishing you see exactly which files will change. LayerAdapt also checks nobody else changed them on your hosting in the meantime.
- Never runYour website's code is read, never run, on LayerAdapt's servers.
Encrypted, private and yours.
- Encrypted at restHosting and database passwords are encrypted with modern authenticated encryption before they are stored, and are never shown again, not even to you.
- Never sharedPasswords and keys are never sent to your browser, written to logs, or shown to the AI.
- Read-only if you likeConnect a database read-only and LayerAdapt can look, but never change a thing.
- The AI sees content onlyWhen you ask the AI to analyze your website, it reads your pages' text and structure. It never sees passwords or settings files.
- Separate workspacesEach business has its own workspace. Nobody outside it can see its websites, data or people.
Who can do what, and a record of what they did.
Strong sign-in
Passwords are stored with Argon2id hashing. Every new account confirms its email address. Sessions use secure, HTTP-only cookies, and five wrong passwords lock the account for 15 minutes.
Warnings by email
A sign-in from a new device, a changed password and a new Google link each send you an email straight away, so you notice if it was not you.
Sign in with Google
If you choose it, Google confirms who you are. LayerAdapt receives only your name, email address and picture, never your Google password, and cannot read your email or files.
Roles and permissions
Owners decide who can view, edit, publish or manage, and which fields each role may see.
Audit log
Every change is recorded with who made it, when, and what it was before.
Sign-in activity
See where your account is signed in and sign other devices out with one click.
Approvals
Require a second person to approve important changes before they are saved or published.
Your website stays yours
A website prepared by LayerAdapt keeps working even if you stop using it.
Two ways to connect, each step visible.
LayerAdapt only reaches what you connect through the product, using the details you enter. It does not know what else you have, or what is inside it, unless you give it access.
Connecting a website
Connecting a database
Every detail: what is stored, what is temporary, and what is deleted when you disconnect
What we look after, and what stays with you.
LayerAdapt is careful with what you connect. But it acts on the access you give it, so some things only you can do.
- Only what you may connectConnect only websites, hosting accounts and databases that you own or are allowed to manage. LayerAdapt cannot check who owns them.
- The access you grantAn FTP account or database user can do whatever its permissions allow. Give LayerAdapt the most limited access that does the job: one website folder, a read-only database user if you only need to look.
- Your passwords and keysKeep the passwords for your LayerAdapt account, hosting and databases private, and change them if you think they were exposed.
- Your own backupsLayerAdapt keeps versions of what it changes, but keep your own backups of your website and database too, especially before the first publish.
- Checking the resultLook over changes and AI suggestions before you publish or approve them. You decide what goes live.
Seven habits that keep your business safe.
- Use a strong, unique passwordfor LayerAdapt, one you use nowhere else. A password manager makes this easy.
- Turn on two-step sign-inwith your email, hosting and Google accounts, wherever it is offered.
- Never share passwords or keysby email or chat. Invite colleagues to LayerAdapt with their own accounts instead.
- Connect trusted resources onlyand only ones you own or are allowed to manage.
- Create a separate login for LayerAdapton your hosting and database, limited to what it needs.
- Review access regularlyRemove people who left, and check Sign-in activity in your account.
- Revoke what you no longer useDisconnect it in LayerAdapt, then delete or change that FTP account or database user.
Stop editing code to change a phone number.
Join early access. When your place comes up, we set your website up with you, and from then on you change it yourself.