Security and enterprise

Run it with your eyes open.

What we do today for data, access and control, and what is still on the roadmap. No badges we haven't earned.

In place today

What is true now.

Workspace isolation

Each workspace's data is separate from every other workspace.

Encrypted in transit

Traffic between visitors, the app and your tools is encrypted.

No model training

We don't train any model on your data or your visitors' conversations.

Export and deletion

Available on request.

Roles and invites

Invite teammates into a workspace and set their role.

API keys and audit log

Keys for programmatic access, with an audit trail of changes.

Plain status

Security review checklist.

ControlWhat it meansStatus
Workspace data isolationSeparate data per workspace.In place
Encryption in transitHTTPS everywhere.In place
Model training on customer dataNot done.Never
Role-based accessRoles per workspace member.In place
Draft and publish with versionsChanges are versioned.In place
SSOSingle sign-on for your identity provider.Roadmap
SOC 2Independent audit.Roadmap
Public uptime SLAContracted availability.Not yet

If a requirement above blocks you, tell us. It helps us decide what to build next.

Enterprise plan

Volume and terms, tailored.

Custom engaged-demo volume and custom pricing. Talk to us about your requirements.

FAQ

Security questions.

Are you SOC 2 or ISO 27001 certified?
No. SOC 2 and SSO are on the roadmap, not shipped. We don't display certification badges we haven't earned.
Is my data separate from other customers' data?
Yes. Every workspace's data is isolated from every other workspace.
Do you train models on our data?
No. We don't train any model on what you or your visitors say.
Is data encrypted?
Data is encrypted in transit.
Can I export or delete my data?
Yes, on request.
Is there an SLA?
Not a public one yet. We would rather say that plainly than publish a number we haven't earned.
What can the agent access?
Only what you point it at. We recommend a demo workspace with sample data, with no path into production systems.

Ask us the hard questions.

Bring your security questionnaire. We'll answer what's true today and tell you what isn't built yet.