Security & Trust
We take the security of your business — and your customers' conversations — seriously. Here is how we protect your data.
Your data stays in India
Your workspace and every customer conversation are hosted in India, on AWS in the Mumbai region. Your data does not leave the country.
Encryption
All traffic is encrypted in transit with TLS, and your data is encrypted at rest. Sensitive values like tokens and keys are protected before they are stored.
Role-based access control
Owner, Administrator, and Agent roles control exactly what each team member can see and do — so people only ever have the access they need.
Multi-factor authentication
Add a second factor to every sign-in for an extra layer of account protection, and require it across your whole team.
Daily backups
Your data is backed up every day, with a tested restore process, so your conversations and history can be recovered if something goes wrong.
Secure payments
Payments are handled by Razorpay, a PCI-DSS compliant payment provider. We never see or store your card details.
Ongoing security reviews
We run regular security assessments and keep our systems and dependencies patched against known vulnerabilities.
Abuse protection
Rate limiting and abuse prevention guard your workspace and its APIs against brute-force attempts and misuse.
Found a security issue?
We welcome responsible disclosure. Email us at support@brookbytes.com and we will get back to you quickly.