Trust
Security at ChatRobo
Security isn't a feature bolted on — it's how we build. Here's how we protect your data and your customers' conversations.
How we protect your data
Encryption everywhere
Data is encrypted in transit with TLS 1.2+ and at rest with AES-256. Secrets and API keys are stored in a managed secrets vault, never in code.
Least-privilege access
Internal access is role-based and audited. Production access requires SSO with multi-factor authentication and is granted on a need-to-know basis.
Isolated tenants
Each workspace's data is logically isolated and scoped by workspace on every request, so one customer can never reach another's data.
Responsible AI processing
We send model providers only what's needed to answer a turn, and contractually prohibit them from training their foundation models on your content.
Continuous monitoring
Infrastructure is monitored for anomalies, with centralized logging, alerting, and automated dependency and vulnerability scanning.
Reliable by design
Managed, redundant cloud infrastructure with automated backups and tested recovery so your assistant stays online.
Practices
The operational habits behind the controls above.
- Encryption in transit and at rest across all services and backups.
- Mandatory code review and CI checks before anything reaches production.
- Regular dependency updates and vulnerability scanning.
- Data-minimization: we collect and retain only what the product needs.
- Documented incident-response process with defined severities and timelines.
Report a vulnerability
We welcome reports from security researchers. If you believe you've found a vulnerability, email security@chatrobo.appwith details and reproduction steps. Please give us a reasonable window to remediate before public disclosure; we won't pursue good-faith research that respects our users' privacy and data.
For data-processing terms and sub-processors, see our Compliance page and Privacy Policy.
Have a security or vendor-review question?
Our team is happy to walk through controls, complete questionnaires, and share documentation.