Security
Built to be trusted with your customers.
What we do today to keep accounts, conversations and keys safe — written plainly, without promises we cannot show.
Access Only the right people get in.
Two-step login
Every account can add an authenticator app with recovery codes. Sensitive actions ask for the password again.
Roles and permissions
Owner, admin, agent and viewer roles, plus custom roles that decide exactly who can see and change what.
Devices and sessions
See where your account is signed in and sign out other devices in one click.
Protection against guessing
Login, sign-up and password reset are rate-limited, and the answers never reveal whether an email has an account.
Data Kept apart and kept quiet.
Encryption in transit
Every page, API call and live connection uses HTTPS or secure WebSockets, with HSTS turned on.
Workspaces kept apart
Every query is scoped to its workspace, and automated tests check that one team can never see another team’s data.
Keys stored encrypted
API keys, SMTP passwords and identity secrets are encrypted at rest and never shown again after saving.
Export and delete
Export contacts to CSV, delete people and their conversations, and sign our data processing addendum.
Messenger Safe on your website.
Identity verification
Logged-in users carry a signature made on your server, so nobody can pretend to be one of your customers.
Allowed websites
Choose the domains where your Messenger may load; everywhere else it refuses to start.
Spam and abuse
Block people by email, phone, IP address, device or words; blocked visitors cannot open a new conversation.
No cookies on your site
The Messenger runs in an isolated frame and sets no cookies on your domain; your page’s CSS and scripts cannot reach it.
Operations Watched every minute.
Hardened pages
A strict content security policy, frame protection and safe defaults on every response.
Backups before changes
The database is backed up before every structural change we deploy.
Public status page
Every part of the service is checked once a minute from the outside, and the results are published as they are.
An audit trail
Important changes — roles, settings, secrets, impersonation by our staff — are recorded with who did them and when.
Found a security issue?
Please write to us privately with the details. We read every report and reply.
Give every customer a fast, friendly answer.
Free. No credit card, no trial clock.