Workspace isolation
Conversations, customers, orders and knowledge stay inside your workspace and are never mixed with another business's data.
ZenbiChat brings Messenger, Instagram, WhatsApp and your website into one workspace. Here is how we keep that data separated, encrypted and under your control.
Six protections that apply to every ZenbiChat workspace.
Conversations, customers, orders and knowledge stay inside your workspace and are never mixed with another business's data.
Data is encrypted in transit with TLS 1.2+ and at rest with AES-256, supported by monitoring and backups.
Channel tokens and store keys sit in encrypted storage and are never displayed again after you connect.
Give agents, managers and owners only the permissions they need, and remove access in one step.
Sign-ins, settings changes and integration updates are logged so you can review who changed what.
Strong password rules at sign-up and sessions that end when you sign out.
ZenbiChat AI answers from your instructions and knowledge base, and your team can take over at any moment.
What we handle, how, and what you can do about it.
| Topic | How we handle it | Your control |
|---|---|---|
| Customer messages | Stored in your workspace to run your inbox and AI replies. | Export or delete on request |
| Connected channels | Connected through official platform authorisation. | Disconnect any channel at any time |
| Team access | Permissions follow each member's role. | Add, change or remove members |
| Account closure | Workspace data is deleted, anonymized or retained according to our Privacy Policy and legal or backup requirements. | Contact us to start closure |
No. Each workspace has its own data boundary. Only people you invite can see your chats, customers and orders.
No. The AI answers from your instructions and knowledge base inside your workspace.
ZenbiChat stops receiving messages from it immediately and the stored access token for that channel is removed.
Primary data residency is the USA (AWS us-east-1). International processing uses safeguards such as Standard Contractual Clauses and data protection agreements. A DPA is available on request.
We answer vendor questionnaires and look into every vulnerability report. Tell us what you saw and we will reply with next steps.
Email the security team