Security
This page describes what we do today. It does not claim certifications we do not hold.
Our forms
- Our onboarding form never asks for passwords, API keys, access tokens or card details. If we need access to an application, we arrange a separate, appropriate method.
- Saved progress uses a private link containing a long random code. We store only an irreversible fingerprint of that code, and the link only works until the form is submitted.
- Answers are checked on our server as well as in your browser, and requests are rate-limited to reduce abuse.
- Uploaded documents are limited to common file types and sizes, are not publicly accessible, and are available only to authorised Citichoice staff.
- Our review area is password-protected and not indexed by search engines.
- Submitting a form does not activate any automation, connect any account or change any live system.
Channel connections
We connect channels using each platform’s official, authorised methods, for example Meta’s WhatsApp Cloud API. Your accounts remain yours.
People in control
The assistant answers from information you approve, follows the rules you give us, and hands conversations to your team when it should.
Still to document
- Encryption in transit and at rest: CONFIRM: state exactly what is in place
- Who at Citichoice can access customer conversations, and how access is limited and logged: CONFIRM: describe your actual controls
- How customer accounts are kept separate from one another: CONFIRM: describe your actual set-up
- Backups and incident response: CONFIRM: describe what you actually do
- AI provider data handling: CONFIRM: see the Privacy page
- Reporting a security concern: CONFIRM: security contact email