The controls your team uses every day, and the documents your legal and IT people ask for. We describe what exists today, not promises.
Every person can add a one-time code or sign in with a passkey instead of a password.
Owners and admins run the account; members get only the permissions their role grants in each workspace.
Your team can serve customers without seeing their full phone numbers.
Attachments are served only to signed-in members of the workspace they belong to.
Scoped tokens, IP allowlists and a log of every write made through the API.
The site, the app and the API are served over HTTPS, and webhook deliveries are signed.
Everything your legal or IT team needs, in one library.
Our security document lists the measures in place today and the ones we do not have yet, such as external certifications. Read it before you decide.
Read the security documentTell us what you need to check and we will answer in writing.
Start with one channel and a pack for your trade. 14 days free, no card.