Built for enterprise data handling.
Customer conversations are sensitive data. We treat them that way. GDPR-compliant by default, EU and UK data residency options, role-based access controls, audit logs, encryption at rest and in transit.
Four non-negotiables.
Every security decision starts from these four principles.
Encrypted in transit and at rest.
TLS 1.3 for everything in transit. AES-256 for data at rest. Database-level encryption for PII fields. Encryption keys managed via AWS KMS with rotation every 90 days.
- ✓TLS 1.3 in transit
- ✓AES-256 at rest
- ✓Database-level PII encryption
- ✓90-day key rotation
Right people, right permissions.
Role-based access control across every action in the platform. SSO via SAML for enterprise. 2FA enforced for admins. Audit logs track every config change with timestamp + actor.
- ✓Role-based access (RBAC)
- ✓SAML SSO (enterprise)
- ✓Enforced 2FA for admins
- ✓Immutable audit log
Certified, not just claimed.
GDPR and UK GDPR compliant. Verified Meta Tech Partner. TikTok Business Messaging API Integration Partner. Standard DPA available within 24 hours of request.
- ✓GDPR + UK GDPR
- ✓Verified Meta Tech Partner
- ✓TikTok Business Messaging API Integration Partner
- ✓Standard DPA on request
Built to stay up.
99.9% uptime SLA on enterprise plans. Multi-region failover. Backups every 6 hours, 30-day retention. Disaster recovery tested quarterly.
- ✓99.9% uptime SLA
- ✓Multi-region failover
- ✓6-hour backups, 30-day retention
- ✓Disaster recovery tested quarterly
Storage location & data residency
For exact storage location and data residency information, the best source is our Data Processing Agreement (DPA) and compliance documentation — available upon request. Contact us to request a copy →
Sub-processors we use, named.
Every vendor that touches customer data is listed below.
If something does go wrong.
Real numbers, real commitments. No "best efforts" hand-waving — these are the SLAs we hold ourselves to.
Doing enterprise diligence?
Send us your security questionnaire. We typically return it within 5 working days with full evidence.