Security
🔒 Your accounts are protected
Your 25 bots work with your services as carefully as a trusted employee, except that every step is recorded in a log.
- Connection without passwords. You connect Google Business, Stripe and social media yourself on the “Connect accounts” screen through each service’s official sign-in. Neither we nor the chat need your passwords.
- Only the permissions needed. Each service gets its own separate access with minimal permissions. The social media bot can’t see your payments, and the invoicing bot can’t publish posts.
- Temporary keys. A bot gets access only for the duration of a task and signs out of the session afterwards. There are no permanent connections.
- Encryption. Access keys are stored only in encrypted form and are never kept in plain text. Access can be revoked in one click.
- Protected panels. Your site and admin panels are protected by Cloudflare Zero Trust, with no VPN.
- Two-factor protection. Where the service allows it, we use an authenticator app rather than SMS. Where your confirmation is needed, the bot will ask for it.
- Full log. Every sign-in, action and sign-out is recorded with the time and the bot’s name, and you can open the log at any time.
Service connections open in stages together with the bots.