# Is it safe to let DemoPage demo my product?

> Every demo runs in an isolated browser on DemoPage's servers, never on the visitor's device, and opens only pages you approved. Payments, invites, API keys, and account changes are blocked in every mode, and secrets on screen are masked before the AI model reads the page. Your sandbox login stays on DemoPage's servers and is never shown in a demo.

Reviewed 2026-10-27.

## What protects your product

- Each demo gets its own sandboxed browser on a separate machine, with no cloud credentials and no access to private networks. The machine is wiped after the demo.
- The browser opens only https pages on your approved list. If a click leads anywhere else, it goes back.
- Payments, plan and billing changes, invites, API keys and tokens, logout, password and two-factor settings, and deleting an account or workspace are refused in every mode, even when a visitor takes the mouse with Try it yourself.
- Anything else that would save, send, or pay stays read-only.
- Keys, tokens, passwords, and card numbers on screen are masked before the page is recorded or read by the AI model.
- A visitor's questions are answered as text and never become instructions, so a visitor can't send the guide to a page you didn't approve.
- Everything runs on Google Cloud in the United States, and every connection is encrypted with TLS.

## Your sandbox login

Only DemoPage's app can read the login you save. It reaches the demo browser over an authenticated connection, is never written to the demo machine's disk, and is never shown in full again, not even to you. The one exception is a DemoPage login, whose password you can see under Show password. [Does the AI see my password?](https://demopage.io/help/passwords-and-the-ai.md)

## Read more

- [The security page](https://demopage.io/security.md) covers the demo browser, blocked actions, masked secrets, logins, and data in detail.
- [What the demo can't do](https://demopage.io/help/what-the-demo-cannot-do.md) lists what the guide refuses, and [Demo guardrails](https://demopage.io/demo-guardrails.md) explains how payments, sign-ups, and writes are blocked.
- To send a security questionnaire or report a vulnerability, email legal@demopage.io.

Step by step: [Security](https://demopage.io/security.md).

## Related questions

- [Does the AI see my sandbox password or the secrets on my screen?](https://demopage.io/help/passwords-and-the-ai.md)
- [Where is my data stored, and for how long?](https://demopage.io/help/where-is-my-data.md)
- [What can't the demo click or change in my product?](https://demopage.io/help/what-the-demo-cannot-do.md)
- [Does DemoPage support SSO, audit export, or data residency outside the US?](https://demopage.io/help/does-demopage-support-sso.md)

Still stuck? Email hello@demopage.io. All questions: [Help center](https://demopage.io/help.md).