Skip to main content

Production checklist

Use this checklist to confirm that essential security measures are configured for optimal protection on the Biel.ai chatbot before going to production. Each item provides straightforward actions to help you secure data, control access, and maintain compliance.

For widget integrations​

Widget Integrations Only

The following steps apply only to implementations using the chatbot widget.

  • Restrict allowed domains: List only the domains authorized to host your chatbot widget in Projects > Settings > Allowed domains. This restricts embedding to approved sites, helping prevent unauthorized access.

For API integrations​

API Integrations Only

The following steps apply only to direct integrations using the public API. These steps are not necessary for widget-based implementations.

  • Enable bearer authentication: Ensure each API client request includes a bearer token in the header as follows: Authorization: Bearer <token>.

  • Set up regular token rotation: Establish a schedule for rotating bearer tokens periodically to enhance security.

  • Verify token security: Confirm that tokens are not publicly accessible (e.g., in repositories) and are shared only with authorized team members.

  • Deactivate unused tokens: Immediately disable any tokens that are no longer in use to prevent unauthorized access.

Completing this checklist ensures that your Biel.ai chatbot environment is secure, protecting data integrity and meeting compliance standards.