Skip to content
Legal

Trust & security

Last updated:

What Frontivo.io does today to keep your business's data and your customers' conversations safe, and, just as plainly, what we don't have yet. The outside services that handle data are listed on our Subprocessors page.

In place today

  • Webhook signatures are checked. Messages from Twilio, Stripe, Meta and our email provider are accepted only with a valid signature from that provider, so nobody can fake a call, payment or message.
  • Connection tokens are encrypted at rest. Logins and tokens for connected apps (calendars, CRMs, Google Sheets, Shopify, WooCommerce, Meta, alert channels) are stored encrypted with AES-256-GCM and never sent to the browser.
  • Passwords are hashed. Passwords are stored only as bcrypt hashes. Sign-in, password reset and other sensitive steps are rate limited.
  • Call recording is off by default. Every call is transcribed and summarised, but audio is recorded only if the business turns recording on, and then each recorded call starts with a spoken notice. Recordings and voicemail audio are deleted automatically after 90 days.
  • Card numbers are masked. If a customer types or says a card number in a chat, text, call or email, it is shortened to its last 4 digits before the message is stored, shown to the AI, or sent on in an alert or webhook.
  • The AI says it's an AI. Calls open with a spoken line saying it's an AI. On website chat, text, social messages and email, the AI is instructed to say so in its first reply, and it never claims to be human.
  • Each business sees only its own data. Every dashboard and API route checks that the signed-in person belongs to that business. Automated tests check every business route for this, and a new route that skips the check fails them.
  • Two-step sign-in. Anyone with a dashboard login can turn on two-step sign-in (an authenticator app, with one-time recovery codes). Frontivo.io staff use it before Platform Admin or support access to a client dashboard opens, and staff sign-ins expire sooner than client ones.
  • Customer data can be exported and deleted. A business can export one customer's data or delete a customer from the dashboard, and can have its whole account deleted (see the data deletion page).

What we don't have yet

  • No SOC 2 report or ISO 27001 certificate.
  • No HIPAA business associate agreement (BAA), so Frontivo.io isn't for US practices that need one.
  • Two-step sign-in is optional; a business can't yet require it for its whole team.
  • No public status page yet.

Data processing agreement

On request for now; a self-serve data processing agreement is coming. Ask through Talk to sales or email support@frontivo.io.

Report a security problem

Email security@frontivo.io with what you found and how to reproduce it. The same contact is published at /.well-known/security.txt.