Security

Security is foundational to KlyoChat. This page summarizes how we protect your data and your customers' conversations.

Encryption

Data is encrypted in transit (TLS) and at rest. Sensitive credentials, such as channel and store connection secrets, are encrypted before they are stored.

Access control

Multi-tenant workspaces are isolated, and access within a workspace is governed by roles (Owner, Admin, Agent) with channel-level scoping. We follow least-privilege internally.

Two-factor authentication

Accounts can enable two-factor authentication (2FA) for an additional layer of protection.

Audit logging

Connections, sends, settings changes, and deletions are recorded in an audit log so you always know who did what, and when.

Infrastructure

The platform runs on standard, portable PostgreSQL with scheduled backups. All outbound platform calls run through a rate-limited queue to respect each platform's limits and messaging windows.

Reporting a vulnerability

Found something? Please email support@klyochat.com and we'll respond promptly.