Your conversations. Kept safe.
Customers trust you with their words. We treat that with care — and we're straightforward about what's done and what's still in progress.
Built secure from the first line.
Encryption everywhere
TLS 1.2+ in transit. Data encrypted at rest, and channel credentials sealed with AES-256-GCM.
Careful with secrets
Passwords hashed with bcrypt. Session tokens are random and only their hashes are stored.
Verified webhooks
Every Meta webhook is checked against its signature before we process a single byte.
Access control
Roles for owners, admins and agents, two-factor authentication, and SSO on Scale.
Isolation by design
Every query is scoped to a workspace. Widget keys are rotatable and can be locked to your domains.
No AI training
Your conversations are never used to train models — not by us, not by our AI provider.
Your data. In your region.
Choose where your workspace lives. Conversations, contacts and attachments stay in that region.
Where we are, honestly.
We'd rather tell you exactly where we stand than display a badge we haven't earned yet.
Data Processing Agreement, EU hosting, data subject request tooling and a public subprocessor list.
AvailableControls are implemented and we're working with an independent auditor. We'll publish the report when it's issued.
In progressObservation period begins after Type I is complete.
PlannedOn our roadmap after SOC 2. We'll share timelines as they firm up.
PlannedAn independent test of the app, API and widget is scheduled; summary available under NDA once complete.
In progressSubprocessors
We use a short list of carefully chosen providers for hosting, email delivery, payments and AI inference. The full list, with locations and purposes, is available on request and in our DPA.
Responsible disclosure
Found a vulnerability? Email security@silah.chat. We respond within two business days and never take action against good-faith research.
Start connecting. Today.
Free forever for small teams. Upgrade when you're ready. No credit card, no sales call.