Skip to content
Security

Enterprise-grade controls, small-business price

Your support agent handles customer data, so we built Buddy to keep it isolated, minimised and under your control, from the database up.

Controls you configure

Turn these on per agent or per workspace, straight from the dashboard.

Domain allow-list

Each agent only runs on the sites you approve. Every plan.

All plans

IP and country rules

Allow or deny visitors by IP range or country, per agent.

Pro

Verified visitor identity

Your site signs logged-in users' details (JWT) with an agent secret, so identities can't be spoofed.

Growth & Pro

PII redaction

Emails, phone and card numbers are masked in stored transcripts.

Pro

Audit log

Every change to agents, team, mailboxes and API keys, with actor, time and IP. Filter it and export it to Excel.

Pro

Rate limiting

Per-agent and per-workspace limits stop scripted abuse before it touches your quota.

All plans

Scoped API keys

Least-privilege keys with eleven scopes. Only a hash is stored, and keys can be revoked instantly.

Pro

Team roles

Owner, admin, agent and viewer roles, so everyone gets exactly the access they need.

All plans

How we protect your data

Tenant isolation

Every workspace's data is separated at the database level with Postgres row-level security. The database itself refuses cross-tenant reads.

Encrypted credentials

Mailbox OAuth tokens, AI provider keys, integration credentials and signing secrets are encrypted at rest. API keys are stored only as hashes.

No training on your data

Your content and conversations are only used to answer your customers. They're never used to train shared AI models.

Retention you control

Choose to keep conversations for 30 days, 90 days, a year or longer. Older conversations are purged automatically every night.

Compliance roadmap

We're open about where we are. Buddy is not yet SOC 2 or ISO 27001 certified. A SOC 2 audit is on our roadmap, and EU data residency is planned. If your security team has a questionnaire, we're happy to walk through our architecture and controls with you.

Security review? We're ready.

Start a free trial and switch on every control in minutes.