Skip to main content
This guide covers what IT teams need to know to evaluate, deploy, and integrate Circuit.

​
Security at a glance

Circuit is designed with enterprise security in mind:
  • Authentication via Google or Microsoft identity providers with SSO support
  • Data isolation: each workspace’s indexes are stored in a separate, isolated database
  • Encryption in transit (TLS) and at rest
  • Role-based access control at the workspace, index, and agent levels
  • API key scoping with optional domain restrictions for embedded chat widgets
For a detailed breakdown, see the security overview.

​
Embed the chat widget

The fastest way to add Circuit to your website is a single script tag. You’ll need an API key from your Circuit agent.
The widget appears as a chat button in the bottom-right corner of your page. It handles chat sessions, streaming responses, and citation rendering automatically.
The API key is agent-specific. Create one from the agent’s settings in Circuit, and add every domain that will host the widget to the key’s allowed domains. This step is required: browser requests from domains that are not on the list are rejected, and a key with an empty list cannot be used from a browser at all.
For full setup details, including the domain matching rules, see the chat widget quickstart.

​
Next steps

SSO configuration

Set up single sign-on with Google or Microsoft.

Widget configuration

Change the widget’s position, color, and greeting.

Security overview

Detailed security architecture and access control model.