For organisations with a security review to pass.
If you're running an RFP, or your security team has to sign off first, talk to us. We'll go through your channels and flows with you, agree volume pricing and a contract, and invoice yearly.
Card numbers never reach your team or your bot
Only the last four digits of a card number are kept, in every conversation, on every plan, and it cannot be turned off.
- Where it applies
- Customer messages, replies from your team and your bot, internal notes, tickets, close notes, file descriptions, and comments and mentions on the social accounts you listen to.
- Your own patterns
- On Business, add patterns such as email addresses, IBANs, PINs or Ghana Card numbers. Each one masks the text, stops a reply from being sent, or flags it.
- What your bot sees
- Flows and every step in them only ever see the masked text.
- A report
- See how much each pattern masked, flagged and refused over the last 7, 30 or 90 days. The text itself is never recorded.
An audit log of who changed what
Every change in the workspace is recorded with who made it, when, and from where, along with every sign-in and how it was made. On Business, you read it and export it.
- Reading and export
- Search by date, open any entry for its details, and export what you see as a spreadsheet.
- How long
- Three years on Business, six months on other plans. Moving to Business shows what happened before, as far back as it has been kept.
- Your SIEM
- With an Enterprise contract, each entry is sent to your SIEM as it happens, such as a Splunk collector. Entries are signed so you can confirm they came from us, and retried if your collector is down.
- Messages
- Messages cannot be edited once saved, by anyone, so a conversation stays a record of what was said.
Customer data is deleted on a schedule
Conversations and social content are deleted automatically, and you can ask us to delete sooner.
- Conversations
- Deleted 24 months after their last activity, with their messages, files and notes.
- Social content
- Collected comments and mentions are deleted 24 months after they were posted.
- Deleting the workspace
- The owner can delete it, and its customer data is gone within 30 days. Unpaid invoices never hold customer data back.
- Billing records
- Invoices and payments are kept as long as the law requires. While invoices are unpaid, the workspace's name and its owner and managers stay so they can pay.
Sign-in goes through your identity provider
- Single sign-on
- On Business, SAML or OpenID Connect with Entra ID, Okta or others, on domains you verify. You can make it required, and let new people on those domains join automatically.
- Provisioning
- Add and remove people automatically over SCIM.
- Two-factor sign-in
- With an authenticator app, on every plan, and required for everyone if you choose.
- Sessions
- While single sign-on is required, you set how long a sign-in lasts, from 4 hours to a week, before people sign in again.
Each person can do only what their role allows
- Roles
- Owner, manager, admin and member, plus separate agent seats for support and for marketing.
- Approvals
- With Social, posts and public replies can wait for someone else's approval, and who assigned, answered, approved, hid or closed each item is kept in a history you can export.
- Supervisors
- On Business, supervisors see and reassign their own teams' work.
Buying through procurement
- We answer your security questionnaire and RFP, and go through your channels and flows with you.
- Volume pricing on conversations and seats, agreed in a contract and invoiced yearly.
- Our team can build your first flows with you and hand them over working.
- You connect your own WhatsApp Business account and pay Meta directly for its messaging, at cost.
Request a demo
Tell us what you want to handle, and we'll come back with a time.
Request a demo
This form is running on UniversalChatbot.