Security sheet
What protects your data, as it is in place today.
To save as PDF: Print, then Save as PDF.
Hosting
Servers in the European Union (Hostinger), database in the European Union (Neon). No open port on the server: all traffic goes through Cloudflare's tunnel and web application firewall.
Encryption
Encrypted connections between the browser and the service (TLS). Daily backups encrypted before upload, restoration verified by automated tests.
Access
Restricted administration, mandatory two-factor authentication (password plus code or passkey), roles and an audit log of every action. No secret key in code shipped to the browser.
Isolation
Each account only sees its own data; a team or school manages seats without ever seeing conversations. Verified by automated tests on every release.
AI models
Messages only go to providers committed to not retaining them for training. Nothing is used to train a model.
Abuse and bots
Rate limits, Cloudflare Turnstile on sign-up and trial, anomaly detection, disposable addresses refused.
Incidents
Journeys checked every hour and published on the status page; affected customers notified within 72 hours of a data breach.
Certifications
Ablyos.ai displays no certification it does not hold. Security questionnaires are completed on request.