Tenant isolation
Every record is stored under the verified tenant, so one customer cannot reach another's data.
How your data is protected
Security
Isolation, access control and records are part of the design.
Controls
What is built in
Each control is part of the platform.
Role-based access
Built-in roles and custom roles, limited to what their creator can grant.
Audit trail
Changes are recorded with actor, time and result.
Secrets kept out of code
Provider keys and signing secrets live in a managed secrets store, never in the website or in code.
Strong password storage
Passwords are stored as salted hashes. Optional authenticator-app sign-in is available.
Verifiable call records
Finished calls are sealed in a hash chain so changes after the fact can be detected.
Limits
Guardrails against misuse and cost
Protection that also protects your bill.
- Rate limits and caps on sign-in attempts, demo calls, minutes and spend.
- Emergency stop halts new calls platform-wide.
- Data retention setting each workspace chooses how long call data is kept.