Built so there is little to attack.
OmniClew runs in the visitor’s browser, from static files, with no language model at runtime. That removes most of the ways a chatbot can go wrong.
No AI services at runtime
By default, OmniClew makes no calls to AI services while answering. It loads static files and matches questions against them in the visitor’s browser. The only optional exception is unanswered-question reporting. Reporting is off unless the website owner turns it on, and when it is on, the omnibox tells the visitor before anything is sent.
What the browser loads
The browser downloads the OmniClew script and a set of static files from the location set in your script tag. OmniClew serves all of these from its own CDN, and loads nothing from third-party hosts.
No cookies
OmniClew sets no cookies. It uses the browser’s local storage on the visitor’s device to keep a record of question outcomes. The record stays on the device, and the visitor can clear it in the browser’s settings.
Nothing to prompt-inject
A visitor cannot prompt-inject OmniClew, because OmniClew has no language model at runtime and never composes text. A visitor’s input is only compared with reviewed questions. The only text OmniClew can show is text that was reviewed before it went live.
Where the risk is: ingesting documents
The risk is in the build, not in the visitor’s browser, because that is where untrusted text meets a language model. A source document that contains instructions aimed at a language model could influence what is written. OmniClew limits this in three ways: every answer must include an exact quote from the source, you review answers and contradictions before anything goes live, and nothing is composed when visitors ask.
Traffic does not cost you
Answering a question uses the visitor’s own browser, and the files are static. There is no per-question cost that traffic could run up, so a surge or abusive traffic changes nothing.
Kept apart from your page
OmniClew renders in isolation, so it does not read or change the rest of your page, and your page’s styles do not change it.
A separate Setup app
OmniClew Setup is a separate application used by the website owner and OmniClew. Visitors only load the omnibox.
Your documents stay on our hardware
OmniClew processes documents with language models that run on OmniClew’s own hardware. Documents are not sent to third-party AI services.
Booking data
Booking submissions are stored in a Cloudflare D1 database. The privacy policy has the details.