Security

Infrastructure and hosting

Your system runs on reputable cloud infrastructure with managed, hardened environments. We handle hosting, updates, and maintenance, so there is nothing for your team to patch or run.

Encryption

Data is encrypted in transit using TLS and encrypted at rest. Secrets and access tokens for connected services are stored securely and never exposed in the application.

Access controls

• Role-based access so each team member only sees what they need.
• Authentication backed by secure, signed sessions.
• Least-privilege access for our team, granted only when needed to support you.

Data isolation

Each customer's configuration and data are kept logically separated, so your information stays your own.

Integration security

Connections to WhatsApp, Meta, Google, and email use official, permissioned access. Tokens are scoped to what the service needs and can be revoked at any time.

Monitoring and logging

We monitor the platform for availability and unusual activity, and keep audit logs of key actions so issues can be traced and reviewed.

Backups and resilience

Data is backed up regularly so it can be restored if something goes wrong, and the platform is built to recover gracefully from failures.

Vulnerability management

We keep dependencies up to date, review changes before they ship, and address security issues promptly as they are identified.

Incident response

If a security incident affects your data, we will investigate, take action to contain it, and notify you without undue delay in line with applicable law.

Your responsibilities

• Keep your account credentials confidential.
• Grant access only to people who need it, and remove access when they leave.
• Use connected platforms in line with their terms.

Reporting a vulnerability

If you believe you have found a security issue, please email us at hello@aiinst.io. We take every report seriously and will respond quickly.