Built to be trusted on your homepage.
Your content and your visitors' data are handled with care at every layer.
Tenant isolation
Every workspace is strictly scoped. One customer's data is never reachable from another.
Encryption
Traffic is encrypted in transit (TLS), and sensitive fields like integration tokens are encrypted at rest.
Grounded, no leakage
The assistant answers only from your approved sources and never invents facts about your business.
Abuse protection
Rate limiting on the widget, login, and signup, plus a sensitivity guard that routes risky messages to a human.
Human in the loop
Sensitive or uncertain conversations escalate to your team instead of being answered automatically.
Enterprise controls
SSO/SAML, a signed DPA, an SLA, and data-residency options on Enterprise.
Compliance & data protection
Data-subject rights, named sub-processors, retention rules, and breach procedures are documented in our Privacy Policy. A signed DPA is available on Enterprise.
Your content is used only to answer your visitors. It is never used to train shared models, and you can delete your workspace and its data at any time.
We're building toward a SOC 2 Type II audit. Ask us for our current security questionnaire responses in the meantime.
Found a vulnerability or have a security question? Contact us. Security reports get a same-day response.