Data Security

Last updated: January 2026

Security is a core design principle at SwiftChat. This page summarises the technical and organisational measures we use to protect your data and your visitors' data.

1. Encryption

• In transit — all traffic between browsers, the widget, the dashboard and our APIs is protected with TLS encryption.
• At rest — stored data (knowledge bases, conversations, account records) is encrypted at rest on managed storage.

2. Access Control

• Role-based access: site owners, agents and admins see only what they need.
• Passwords are hashed with industry-standard algorithms — never stored in plain text.
• API access uses signed, expiring tokens; widget embeds are scoped per site.

3. Isolation

Each site's knowledge base, configuration and conversations are logically isolated. Your content is only used to answer questions for your own widget and is never shared with other customers.

4. AI & Third-Party Processing

Answers are generated by the AI providers configured for your account. We send only the content needed to answer the visitor's question. Payment details are handled entirely by our payment provider — card numbers never touch our servers.

5. Application Security

• Security headers (CSP, X-Frame-Options, HSTS) on all served pages.
• Rate limiting on authentication and chat endpoints to resist abuse.
• Input sanitisation on crawled and uploaded content.
• Regular dependency updates and security reviews.

6. Reliability & Backups

We monitor service availability and maintain regular backups so your knowledge base and conversation history can be restored in the event of an incident.

7. Responsible Disclosure

If you believe you have found a security vulnerability, please report it to us privately via the contact options on our website. We investigate all credible reports and appreciate coordinated disclosure.

8. Compliance

We design our practices around recognised security and privacy principles. For questions about data processing agreements or specific compliance requirements, contact us.