Security
Security, described by the mechanism behind it
This page names what the product actually does: the checks that run, where they run, and what happens when they fail. You can hold us to every sentence.
- Every control named
- Two-factor sign-in
- Subprocessors published
A message from a customer passes four checks in order: it is scoped to the business's own workspace, the action is checked against permissions on the server, the website chat's fixed check reads it before any model call, and it is answered from the business's own content. Beside it, the controls in place: Workspace isolation, Per-action permissions, Two-factor sign-in, Encrypted credentials, Signed webhooks.
Who can reach what
One workspace never sees another
Access is decided on the server, for every request and every action.
- One workspace cannot see another
- Every record that belongs to a workspace is scoped at the API on the way in, not filtered on the way out. A request for someone else’s conversation is refused, not answered with an empty list.
- Permissions are checked per action
- Roles decide what each person can do, and the check runs on the server for each action. Being an administrator does not skip it.
- Two-factor sign-in
- An authenticator app with recovery codes, and a list of your signed-in sessions you can end from the portal.
- An audit log, from Professional
- Who changed what in the workspace, and when, kept for review.
- Deleted means rejected
- A deleted account is refused at sign-in and at token refresh, not merely hidden from a list.
What happens to your data
Your keys stay encrypted, your data stays yours
What is stored, how it is protected, and how it leaves.
- Third-party credentials are encrypted at rest
- Your Twilio auth token, your AI provider keys and your channel credentials are stored encrypted and never shown back to you in full.
- Your AI provider key is yours
- Add your own OpenAI, Anthropic or Google key and that traffic runs under your account and your agreement with that provider.
- Export and deletion
- Reports and your customer list export as CSV, and deletion is a real deletion.
- Subprocessors are published
- The services that touch your data are listed on their own page and kept current.
How the platform defends itself
Guarded fetches, signed hooks, limits that hold under load
The checks that stop the platform being turned against you or itself.
- Server-side fetches are guarded
- Whenever EzyConn fetches an address you supply (reading your site, calling your webhook), the destination is checked first, so it cannot be used to reach internal addresses.
- Webhooks are signed and verified
- Inbound webhooks from channel providers are signature-checked before anything acts on them, and the webhooks EzyConn sends you are signed too.
- Rate limits and a spend cap
- Per-workspace limits on requests and on AI spend, enforced on the streaming path as well as the ordinary one.
- Payments cannot double-charge
- A retried payment or subscription request is recognised, not charged twice.
- Caps hold under races
- Seat and workspace limits are checked under a database lock, so two invitations at once cannot both slip past a cap.
What the AI may and may not do
A fixed check first, your content only after it
The agent is fenced by rules that are not model judgement.
- A fixed check runs first, on the website chat
- Every message to the website chat passes a rule set before any search or model call. It is on by default, no setting turns it off, and the same message always gets the same verdict.
- It declines rather than improvises
- Requests for regulated advice, attempts to pull out its instructions or credentials, threats and invitations to invent a commitment are declined with fixed wording, not model-written replies.
- Business rules are not model judgement
- Whether you cover a postcode, whether a phone number dials and whether a time is free are checks. The model is never asked to decide them.
- Answers come from your content
- It answers from your own pages and files and shows the source. When nothing relevant is found, it says so and offers a person.
Start free
Read the controls, then try it on real traffic
The free plan is enough to see every control on this page working on your own workspace.
Free plan, no card.