Controls your compliance team will sign off
Buddy is locked to your domains. Pro adds IP and country rules, verified visitor identity, PII redaction and a full audit log, without an enterprise contract.
What you get
Domain allow-list
The widget only runs on sites you approve, so nobody can put your agent (and your bill) on their page.
IP and country rules
Allow or block visitors by IP range or country. Pro.
Verified visitor identity
Your site signs logged-in users' details (JWT), so the agent knows who it's talking to and can't be spoofed.
PII redaction
Emails, phone numbers and card numbers are masked in stored transcripts. Pro.
Audit log
Who changed what and when, including API-key actions, with filters and Excel export. Pro.
Rate limits and abuse protection
Per-visitor and per-agent limits, an optional Cloudflare Turnstile check, and a daily AI spend ceiling per workspace stop scripted abuse before it reaches your bill.
Data-subject requests
Find everything stored about one person by email or visitor id, export it as JSON or delete it permanently. Every request is audited.
Tenant isolation
Every workspace's data is separated at the database level with row-level security.
Configurable retention
Keep conversations for 30 days, 90 days, a year or longer; older data is purged automatically.
Put your support on autopilot, without losing the human touch
14 days of Growth free. No card required. Live in minutes.