How to set up a white label chatbot platform as an admin
Set up your branded platform, create a regular customer, prepare a separate prospect test chatbot and check customer permissions with a concrete example.

A white label chatbot platform needs more than a logo: domain, sender identity, client quotas, model access and dashboard permissions must work together.
A white-label administrator runs one branded organization. This role is different from a WebChatAgent superadmin and from an end customer: it may manage only its own organization, customers, pooled limits, branding and sender configuration. The server keeps that tenant boundary authoritative even when the menu hides an unavailable action.
The setup order matters. Confirm plan and pool first, connect and verify the customer-facing domain, apply approved branding and legal links, configure your own SMTP, then create a regular customer. A prospect demo is a separate test chatbot owned by the admin. Allocate the customer’s resources, restrict dashboard areas and inspect the customer view before handing over access.
The example uses the fictional brand Northstar AI Studio, the reserved addresses support@example.com and wl-client-tutorial@example.com and WebChatAgent blue #029cf5. Northstar Demo Client is a regular customer account without automatic expiry. Northstar Demo Bot is the admin’s temporary prospect chatbot; Northstar Client Test is the customer’s regular chatbot. These names identify different owners and different lifecycles.
Privacy-protected two-click player
White-Label Chatbot Platform Setup: Domain, Brand & Clients
Set up a white label chatbot platform as an admin: configure domain, branding, SMTP, client accounts, quotas, permissions and verified cleanup.
The YouTube player stays blocked until you choose Play. Loading it connects your browser to YouTube and may transfer technical data to Google.
Open directly on YouTubeWhat you will have at the end
- A documented WL-admin role and tenant boundary
- A verified plan, shared resource pool and non-billing setup path
- A customer-facing domain and DNS production checklist with an explicit local-evidence boundary
- Approved platform branding, legal email links and sender configuration
- One regular customer with explicit quotas, providers and dashboard permissions
- A separate admin-owned prospect test chatbot with a visible expiry notice and no paid bot-slot usage
- A customer-view proof plus disable, deletion and restoration evidence
Before you start
- An account whose database-backed role is admin and whose organization type is whitelabel
- Authority over the organization brand, customer accounts and resource allocations
- DNS access for a dedicated subdomain controlled by the organization
- Approved light and dark logos, favicon, primary color, platform name and support address
- Published imprint and privacy-policy URLs for branded email footers
- A dedicated non-production SMTP service and controlled recipient if email delivery will be tested
- A cleanup owner and no real customer data in any tutorial field
Brand shell → delivery identity → customer boundary
The domain and branding define what customers see. SMTP defines which infrastructure sends account mail. Customer quotas, model providers and permissions define what one customer may consume and open. Treat these as three separate controls and verify each from the customer side.
A green save message proves only persistence. DNS needs an independent verification result, SMTP needs a connection or controlled delivery test, and customer access needs an impersonated or separate-session check. Paid plan, add-on and voice changes are billing actions and stay outside a reusable tutorial capture.
01–13
Set it up step by step
Confirm the WL-admin role and safe navigation
Start by proving which organization and role you are operating.
Sign in as the dedicated WL administrator and open Account from the header. The account must resolve to role admin inside an organization whose type is whitelabel. The sidebar then shows the organization-scoped Admin section with Users; it must not expose platform-wide Organizations, Costs, Revenue or other superadmin routes.
Record the organization name, account identity and current host without showing a password, session token or SMTP secret. If the expected status, Branding card, SMTP card or Users link is absent, stop. Do not continue under a normal user, team member or platform superadmin.
- Required role: admin
- Required organization type: whitelabel
- Core routes: /settings/account, /account/whitelabel/setup and /settings/users
Review plan, domain and shared capacity
Read the operating boundary before allocating anything.
At the top of Account Settings, read the current plan, chatbot pool, messages per month, training-data characters and domain verification badge. The first number is live organization-wide usage; the second is available capacity. Users later receive personal caps from this pool.
You may open add-on, plan and voice dialogs to explain available choices, but do not accept terms, select Buy now, change a paid quantity, cancel a tier or open the Stripe portal during the reusable capture. A billing preview is not a test purchase.
- Usage is not the same as distributed quota.
- An empty personal cap means shared pool behavior.
- Every paid change requires separate commercial approval.
Choose a controlled customer-facing subdomain
Use a domain your organization owns and can change safely.
Open Set up whitelabel and enter only the approved host name, without https://, a path or trailing slash. This tutorial uses northstar-wl-tutorial.test, a reserved local-only value that cannot prove domain ownership, public routing or certificate readiness. Replace it with a dedicated organization-controlled subdomain only in the separate production rollout.
Changing the domain clears its previous verification. Confirm the intended host with the DNS owner, identity owner and support team before saving. Do not reuse a production login domain for a tutorial or point an apex domain without a reviewed DNS and mail-impact plan.
- Use a dedicated subdomain.
- Never invent ownership of a domain.
- Saving a new host deliberately resets verification.
Read the DNS instructions and verify production separately
The local badge demonstrates UI state; only an external production check proves DNS and HTTPS.
The setup page displays the production workflow: copy the exact record type, name, target and TTL to the organization’s DNS provider. CNAME is the recommended option; use an offered A-record fallback only after the DNS owner reviews the operational trade-off. No DNS record was created or queried during this reusable local run.
The green state in the screenshot was seeded locally to explain the interface. For production, wait for propagation, select Check DNS now, require DNS correct and Verified, then open the HTTPS tenant URL in a clean browser and confirm certificate, host and branded login. None of those external DNS or HTTPS checks is claimed by this tutorial evidence.
- Record the exact type, name, target and TTL.
- Verify HTTPS in addition to the dashboard badge.
- DNS propagation may require another check later.
Apply approved branding and legal links
Configure the full identity, not only a logo.
In Branding & whitelabel, set the fictional platform name Northstar AI Studio, support@example.com, primary color #029cf5, “Powered by Northstar AI Studio”, https://example.com, a fictional footer and the reserved imprint and privacy paths under example.com. Upload the approved TEST logo and favicon; the real organization must use its own reviewed assets and legal pages.
Save once and allow the application reload. Check that no field is clipped and that image proportions are preserved. The primary color generates the interface color scale, while email footer links are separate from the SMTP sender name and address.
- Platform name: Northstar AI Studio
- Primary color: #029cf5
- Tutorial addresses and URLs use reserved example.com values only.
- Preserve both the uploaded test mark and the WebChatAgent video lockup without distortion.
Verify the branded dashboard shell
The local dashboard proves persistence; the customer host still needs a separate production check.
Open Dashboard after saving. Confirm the Northstar logo, the Welcome back, Northstar heading, the real No Chatbots Yet card, the organization name in the browser title and the saved blue theme. This view is deliberately different from Account Settings, so it proves that the persisted branding reaches another product route.
For the production launch, open the verified tenant domain in a separate clean session. Check the favicon, certificate, login page, blue focus and button treatment, account links and customer-facing support contact. Inspect desktop and a narrow viewport without changing to Dark Mode.
- Verify the dashboard route locally, then the live host separately.
- Check logo geometry and keyboard focus.
- Keep English and Light Mode throughout the public capture.
Configure your own SMTP without exposing credentials
White-label invitations must never fall back to the platform identity.
Load Email / SMTP before entering anything. Use the organization’s approved non-production host, port, SSL mode, username, password, sender name and sender address. The password must come from a secret store and remain absent from screenshots, narration, logs, source files and manifests. Leaving the password empty keeps an already stored secret.
Save only after the current configuration loaded successfully. Test connection may contact the SMTP server, so run it only against the approved sandbox. For a delivery proof, invite only a controlled inbox after connection passes. The server refuses white-label mail without usable own SMTP to prevent a WebChatAgent sender leak; a failed test blocks the invitation step.
- Never show the SMTP password.
- Port 587 normally uses STARTTLS; port 465 uses the SSL switch.
- A connection test does not prove inbox delivery.
Open Users and understand shared versus personal limits
Allocate from evidence, not by dividing every pool equally.
Open Admin → Users. The organization pool cards show live used capacity and the amount already distributed. The customer table then shows account status, actual chatbot count, personal allocations, allowed internal model providers and last activity.
Leave a resource empty when the customer should draw from the shared organization pool. Enter a number only when the contract or risk policy needs a personal cap. Regular customer bots use paid bot slots. Only chatbots explicitly created with the admin’s test option stay outside that slot count; their messages, indexed content and storage still consume package resources.
- Used: measured consumption.
- Distributed: explicit personal caps.
- Actual chatbots: current customer-owned bot count.
Create a regular customer directly
Direct creation sends no email and gives the customer no automatic expiry.
In Admin → Users, choose Create directly, not Invite user. Enter Northstar Demo Client and wl-client-tutorial@example.com, then set a strong password. The recording uses a newly generated random password that stays masked and is never saved in the public material. Direct creation sends no email.
After Create, look for exactly one new row with role user and active status. This is a regular customer account without automatic expiry. Record its internal ID privately so the temporary demo can be removed precisely. For a real customer, share access through your approved secure channel; never expose a password in a screenshot, narration or support chat.
- Name: Northstar Demo Client
- Email: wl-client-tutorial@example.com
- Email sent: no
- Account: regular customer; no automatic expiry
Create a test chatbot for a prospect
The admin’s prospect bot uses no paid bot slot. Its banner shows when the temporary demo ends.
Stay signed in as the white-label admin. Choose Create New in the sidebar, enter Northstar Demo Bot and select Test chatbot (archived after 14 days). Then select Create. For example, an agency can prepare this separate demo for a prospect before allocating a regular customer chatbot.
On the new chatbot page, look for This is a test chatbot and Convert to regular chatbot. The sidebar must show Test beside Northstar Demo Bot. Open the bot from that sidebar entry if you want to check its status again. The name alone does not create a test chatbot: the selected option and the saved status are what matter.
Compare the organization’s paid chatbot usage before and after creation. This bot should add no paid slot, but its messages, indexed content and storage still count against the shared package limits. The bot belongs to the admin who created it. It is separate from Northstar Demo Client and must not appear in that customer’s list.
After 14 days, the bot is archived and stops answering. Its settings and sources remain, but its indexed knowledge is cleared. Convert to regular chatbot keeps an active demo as a regular bot; reactivating an archived bot also makes it regular and requires a free paid bot slot. Reactivation queues its sources for indexing again. Wait for indexing to finish before testing answers; a connected mailbox must be enabled again separately. An archived bot is permanently deleted after 120 days, approximately four months. These later lifecycle transitions are explained from the product rules, not demonstrated by advancing the clock in this tutorial.
- Owner: white-label admin; customer account unchanged
- Name: Northstar Demo Bot; status: Test
- Paid bot slots used by this test chatbot: 0
- Automatic archive: after 14 days; permanent deletion: 120 days after archiving
- Conversion or reactivation requires a free regular bot slot.
Allocate quota, providers and dashboard permissions
Use one small, explainable customer contract.
Return to Admin → Users and edit only Northstar Demo Client. Allocate 1 chatbot, 2,000 messages per month and 500,000 training characters. Restrict internal providers to Google Vertex (EU). Turn on restricted dashboard access and grant Chatbots, Conversations and Analytics. Mark Leads as a locked preview; leave Live Chat, Feedback, Questions, Bookings, Tickets and Calls hidden.
Save and reopen the customer to confirm persistence. A teaser is not access: it shows a blurred feature preview and the organization contact route. Tightening the customer restriction also clamps that customer’s team-member permissions; lifting the restriction later does not automatically restore removed rights.
- 1 chatbot · 2,000 messages · 500,000 characters
- Allowed provider: Google Vertex (EU)
- Granted: Chatbots, Conversations, Analytics
- Teaser: Leads; all other listed areas hidden
Open the customer view and prove the boundary
Verify what works, what is teased and what stays hidden.
Use Log in as this user on the active Northstar Demo Client row. The orange impersonation banner must identify wl-client-tutorial@example.com. Create one regular assistant named Northstar Client Test. Test is only part of its example name, not its status. It uses the customer’s regular bot allocation and has no automatic expiry. Verify that Chatbots, Conversations and Analytics open and that only Google Vertex (EU) is available as an internal provider.
Check the customer’s chatbot list: it should contain Northstar Client Test, not the admin-owned Northstar Demo Bot. The customer’s bot must have neither the temporary-demo notice nor a Test badge. No AI answer is generated in this permissions check, so selecting the provider is not evidence of an actual provider request.
Open Leads and require the locked preview instead of live data. Try a direct Bookings URL and require a return to Dashboard without protected content. The customer must not see Admin → Users, Account white-label status, Branding, SMTP, plan purchase or another customer’s assistants. Record allowed and denied results separately.
- Allowed: own chatbot, Conversations, Analytics
- Teaser only: Leads
- Hidden or denied: Bookings, WL administration and other tenants
- Impersonation banner must stay visible until exit.
Return, revoke the demo customer and restore every change
Finish with proof that the reusable run left no customer or brand residue.
Exit impersonation through the orange banner and require the WL admin to return to /settings/users. Disable Northstar Demo Client and verify that its credentials are rejected. Re-enable only long enough to finish a planned check; otherwise continue directly to permanent deletion.
Delete wl-client-tutorial@example.com and confirm the warning that its assistant and data are removed. Query the organization inventory again and require the user, Northstar Client Test bot and dependent records to be absent. This does not delete the admin’s separate Northstar Demo Bot. The local capture runner removes that prospect bot when it deletes the isolated admin and organization in its final cleanup.
Restore the saved branding snapshot, remove the exact uploaded demo logo files, restore or clear the tutorial domain and verify no checkout, invitation, model-provider call or external customer mail occurred. Final cleanup must report zero tutorial users, organizations, bots, dependent rows and uploads. Customer deletion alone is not enough to establish those five results.
- Delete the customer and its regular bot; remove the admin’s prospect bot separately.
- Exact branding/domain restoration
- No paid transaction, invitation or production email
- Final database and filesystem inventory: zero tutorial residue
Example & result
See the practical test and its result
Every tutorial includes a fixed input, the expected outcome and a transparent record of what was actually verified locally.
Practical example: White-label platform admin guide: domain, branding, SMTP and client access
The shown interface was verified locally. Use the fixed input to confirm the outcome reproducibly in your account.
Exact test input
Create Northstar Demo Client as the regular customer wl-client-tutorial@example.com. Separately, use the admin’s Create New dialog to create Northstar Demo Bot with Test chatbot selected. Allocate the customer 1 regular chatbot, 2,000 messages, 500,000 characters and Google Vertex (EU); grant Chatbots, Conversations and Analytics, show Leads as a teaser and hide the remaining customer areas.
Expected result
The regular customer has no automatic expiry. The admin’s Northstar Demo Bot shows the test banner, Convert to regular chatbot and a Test badge without increasing paid bot-slot usage. The customer sees only its regular Northstar Client Test bot, can open the granted areas, sees Leads locked and cannot access Bookings by direct URL. Cleanup removes both users, the organization, both bots, uploads and dependent records.
What was actually verified
The updated capture is awaiting its end-to-end review. The earlier published workflow is not evidence for the new test-chatbot scene. New screenshots must prove the saved test status, unchanged paid bot-slot count, customer isolation and complete cleanup before this example can be marked verified end to end. Archive, reactivation and final deletion are explained product rules, not simulated results. Public DNS, tenant HTTPS and SMTP delivery remain outside the local demo.
Tips & tricks
Make the setup reliable
Test with realistic examples, record your baseline and change one setting at a time. That makes real improvements visible.
Separate branding from sender identity
A logo and color do not configure email delivery. Treat SMTP host, sender address, authentication, footer and legal links as a separate reviewed release.
Use direct customer creation before invitation delivery
Direct creation proves quotas and permissions without sending mail. Test invitation delivery later with a controlled inbox after own SMTP passes.
Keep a prospect demo separate from customer access
Create Northstar Demo Bot as the admin’s test chatbot. Create Northstar Demo Client as a regular customer, then create that customer’s regular bot from the customer view. A bot name containing Test does not set its lifecycle.
Allocate a contract, not a guess
Write the customer’s bot, message, content and provider limits before editing the row. Compare distributed totals with the organization pool after every change.
Verify restrictions from the customer session
A saved permission object is not enough. Verify allowed navigation, one teaser, a hidden direct URL and absence of every WL-admin surface.
When something does not work
Troubleshooting
Check status, permissions and test data systematically before changing the model or prompt.
I cannot find the test-chatbot option while creating a customer
Customer creation makes a regular user without automatic expiry. For a prospect demo, return to the white-label admin session and choose Create New in the chatbot sidebar. Select Test chatbot there. End customers cannot use this admin-only option.
The demo bot uses a paid slot or has no Test badge
Check the saved chatbot status and owner, not its name. Northstar Client Test is deliberately a regular customer bot. Northstar Demo Bot must be created by the WL admin with Test chatbot selected and show its banner and Test badge. Messages and indexed content still count toward the package even when paid bot-slot usage stays unchanged.
An archived test chatbot cannot be reactivated
Reactivation converts the chatbot to regular status and needs a free paid bot slot. Check the organization pool before making a paid change. Sources are queued for indexing again, so wait for completion before testing answers. Enable a connected mailbox separately. This tutorial does not simulate archive, reactivation or final deletion; these are lifecycle rules, not recorded test results.
The custom domain remains unverified
Compare the exact host, record type, target and TTL with the setup page. Remove conflicting records, wait for propagation and check again; do not claim the tenant URL is live while the badge is pending.
SMTP test fails or invitations do not send
Verify host, port, SSL mode, username, stored-password state and allowed sender. Test the sandbox connection first. White-label mail is intentionally refused without a usable own SMTP transport.
The customer sees too much or too little
Reopen the exact user row and distinguish true, teaser and hidden values. Exit and start a fresh impersonation session, then test both navigation and direct URLs. Do not assume a hidden menu is a server denial.
Cleanup leaves a bot, upload or dependent row
Stop publication. Preserve IDs, run the exact user purge, remove the organization branding-upload directory, restore domain and branding snapshots and repeat the read-only inventory until every tutorial-specific result is zero.
Ready for a production-style test
Before handing over a real customer account, repeat the allowed, teaser and denied-route checks with that customer’s allocations. Review the admin’s prospect test bots separately so their archive dates are not confused with customer access. A production launch still needs independent public DNS, tenant-host HTTPS, SMTP connection and controlled mailbox-delivery checks.
Related resources
White-label platform plans
Compare the commercial platform scope before changing a paid plan or add-on.
White-label chatbot platform comparison
Understand the difference between a branded widget and a full reseller platform.
Sell AI chatbots to clients
Test chatbot, convert, client account, package and archive in one workflow.
