01Encryption everywhere
All traffic is TLS 1.3. All stored data — sources, indexes, conversations, backups — is encrypted at rest with AES-256. Keys are rotated and managed in a dedicated KMS, never in application code.
Trust
Security is the product.
A chatbot that knows your business only works if that knowledge is locked down. Here's how we keep it that way.
Last updated · June 2026
02Workspace isolation
Every workspace's knowledge index is logically isolated. Your bot cannot retrieve another customer's content — the query layer enforces tenancy before any model sees a token.
03Access control
SSO and role-based permissions on Scale plans; two-factor authentication for everyone. Austial staff access customer data only for support you request, with every access logged and reviewed.
04Testing & compliance
Annual third-party penetration tests, continuous dependency scanning, and a private bug-bounty program. GDPR and CCPA ready today; SOC 2 Type II certification in progress with reports available under NDA on completion.
05Honest disclosure
If an incident ever affects your data, you hear it from us first — within 72 hours, with what happened, what we did, and what changes. Report vulnerabilities to security@austial.com; we respond within one business day.
Questions about this document? Write to legal@austial.com — a human answers, not the bot.