Back to Dashboard

Documentation

Learn how to use Asyntai

Getting Started
Installation Knowledge Base Test Your AI Manage Websites
Customization
Widget Colors AI Assistant Name Initial Message Widget Position Auto-Trigger Greeting Bubble Unread Badge Instruction Mode Ask Questions Use Emoji Collect Emails Collect Phone Numbers Smart Lead Capture Localization Hide Branding Privacy Link Custom Notice Transcript Download New Conversation Conversation History Tagline & Status Dot Speech to Text Chat Icon Company Logo Character Limit Temperature
AI Instructions Tips Switching From Another Chatbot Compare Plans
Features
Website Crawl Knowledge Gaps Product Cards Dynamic Product Cards Dynamic Images User Context Custom Tools Link Parameters Live Monitoring Human Takeover Escalation AI Notifications Daily Report Real-Time Data Feed Real-Time Data Feed Max Team Members Single Sign-On Two-Factor Authentication Include Images Image Vision Translation Widget Localization AI Transparency Leads Smart Lead Capture Support Tickets Bookings Embeds Exclude Pages Blocked IPs Retention Policy Zero Retention Mode PII Redaction Output Classifier Widget Version Pinning Audit Log Smarter Model Enable Thinking Reply Suggestions Follow-up Messages Speech to Text Transcript Download Embedded Chat
Analytics
Chat Analytics Chat Logs
Integrations
REST API Instagram Messenger WhatsApp Discord Zapier Email Mobile Apps
Other
Add to Home Screen Custom Open Button Ask AI Buttons Payment Failed?
Ask AI

Widget Version Pinning

Freeze the widget at a version you control and verify it in the browser

Go to Widget Version Pinning
Enterprise

Overview

Normally your site loads the Asyntai widget from a single URL, so whenever we ship an update everyone gets it on the next page load. That is what most customers want. But if you run a regulated site and cannot have third-party code changing on your production pages without review, you can pin your integration to a specific version instead. The widget is frozen at the exact bytes it had when you pinned, and your embed carries an integrity hash so the browser itself verifies the file.

How It Works

  1. You turn pinning on - we snapshot the current widget into a private, frozen copy just for your site
  2. You get an integrity-verified embed - a ready-to-paste script tag with a Subresource Integrity hash and a version-specific URL
  3. Our deploys stop reaching your site - the frozen copy never changes, so nothing we ship alters your production code
  4. You update when you choose - one click snapshots the latest version and issues a new hash; you paste the new snippet when you are ready
Widget Version Pinning
We deploy an update Ignored
Your site keeps running Pinned version

What Is a Subresource Integrity Hash?

It is a browser security feature. Your script tag includes an integrity attribute holding a hash of the exact file. Before running the file, the browser hashes what it downloaded and compares. If even one byte differs — because the file was tampered with or a network was compromised — the browser refuses to run it. It is the standard defence against a supply-chain attack on third-party scripts.

What the hash covers

The integrity hash verifies the widget's code file. Live data the widget then loads — your settings, products and messages — travels over separate, secured connections and is not part of the hash. That is normal: the hash protects the code, which is what a supply-chain attack would target.

Turning It On

  1. Open the Widget Version Pinning page from your dashboard
  2. Switch it on — your frozen snippet appears immediately
  3. Replace your current Asyntai script tag with the pinned one, including the integrity and crossorigin attributes exactly as shown

Adopting an Update

When we ship a new version, your dashboard shows that an update is available. You review it, click update to snapshot the latest version, and paste the new snippet into your site. Because the integrity hash changes with the code, updating always means swapping the script tag — that is by design, and it is what keeps the verification honest.

Good To Know

  • Nothing changes without you - a pinned site is unaffected by our deploys until you adopt an update
  • You may miss improvements and fixes - pinning means new features and bug fixes do not reach you until you update
  • We will notify you of security updates - since pinned widgets do not auto-update, we contact you if your pinned version needs a security fix
  • The crossorigin attribute is required - Subresource Integrity only works when the script tag includes the crossorigin attribute; keep it exactly as shown
  • Turning it off - switches you back to the always-latest embed; replace the pinned script tag with the standard one

Note: Widget Version Pinning is part of an Enterprise agreement. Email [email protected] and we will walk you through it.