SOC 2-ready controls
Access management, logging, change management, and incident processes for buyer confidence.
Trust copy for the prototype site, designed to show the security posture SMB and mid-market buyers expect.
Role-based access, audit trails, data retention controls, restricted actions, human approvals, and privacy-friendly workflows.
Access management, logging, change management, and incident processes for buyer confidence.
Mask sensitive data, limit retention, and keep conversations tied to policy-safe actions.
Require agent confirmation before refunds, account changes, or sensitive workflows.
Track AI responses, actions taken, escalations, and admin changes for review.
Approve answer sources, version policies, and monitor hallucination risk through review queues.
Support SAML/SSO and role-based permissions for larger mid-market teams.
| Control | Starter | Growth | Scale |
|---|---|---|---|
| Role-based access | Basic | Advanced | Custom roles |
| Audit logs | 30 days | 180 days | Custom retention |
| Restricted actions | Included | Included | Included |
| Security review | Self-serve | Standard packet | Dedicated review |