Skip to content
Security & data

Trust begins with knowing the details.

Understand the controls in the product, the choices your team makes, and the deployment information to review before rollout.

01

Access follows the workspace.

Authenticated operations use organization and website context. Workspace roles limit who can change settings, connect providers and manage content.

02

Credentials have a separate path.

Integration credentials are encrypted with AES-256-GCM using a configured server key. Secret credentials belong on the server, not in the website embed.

03

Knowledge requires review.

Published sources inform visitor answers. Drafts remain separate, and the private playground lets your team test behavior before installation.

A practical review

Ask for evidence that fits your requirements.

Application features are one part of a security review. Hosting, operations, provider agreements and retention also matter.

Authentication and team access

The product includes account authentication, team roles and Enterprise SAML SSO capabilities. Configure access around the people who need it and review membership as responsibilities change.

Visitor information and integrations

Conversations, visitor-provided contact details, published knowledge and usage records support the product workflow. Administrators choose connected tools. Review permissions and the information sent to each destination.

AI provider configuration

Answers, knowledge indexing and voice features use AI models accessed through OpenRouter. The current model providers, what they receive and how they may retain it are listed on the service providers page.

Retention, export and deletion

Conversations stay until your team deletes them, or until an optional automatic-deletion period ends. Administrators can export the whole workspace, export or erase everything about one person, and delete conversations; owners can delete the workspace. Replays, tracking events and logs are deleted on fixed schedules listed in the privacy notice.

Security reviews and reporting

Contact the team for a security questionnaire, deployment details or to arrange a private vulnerability report. Start with a high-level description; avoid sending credentials or sensitive exploit details through a general sales form.

Request a security review ↗

Read the legal documents.

The terms, privacy notice and data processing agreement that apply to every Chatrevia workspace.

Privacy notice

How Chatrevia collects, uses and protects information about our customers, their teams and the people who chat on their websites.

Read ↗

Acceptable use

What you may and may not do with Chatrevia, so the service stays safe for businesses and the people they talk to.

Read ↗

Accessibility statement

How accessible chatrevia.com, the Chatrevia team app, help centers and the Chatrevia messenger are, known limitations and how to give feedback.

Read ↗

Legal notice

Information about the company that operates Chatrevia, as required for websites offered in the European Union.

Read ↗