Access & privacy
/ Control who sees what, scope your API keys, keep customer data private.
Who sees what
Every part of the dashboard (Agents, Training, Integrations, Human Desk, Analytics, Settings) can be locked down by role. People only see what they need.
| Section | What it covers |
|---|---|
| Agents | Create, edit, and delete agents and knowledge |
| Training | Run training and view scores |
| Integrations | API keys, widget config, webhooks |
| Human Desk | View and resolve tickets |
| Analytics | Usage and conversation metrics |
| Settings | Organization, billing, members |
API keys
A key belongs to one organization and cannot touch another's agents or tickets. Rotate keys anytime under Settings, then API keys.
Privacy
- TLS 1.3 for everything in transit
- Each tenant is isolated at the database level
- Hashed user IDs for memory, so no raw PII is needed
- Domain allowlists stop anyone else from embedding your widget