Tenant isolation
Every record, call, message, credential reference, workflow and audit event is bound to one tenant.
Trust center
Autonomy with explicit boundaries and evidence.
Security, privacy and operational safety are enforced by tenant scope, provider verification, permissions and auditable state transitions.
Security architecture
Least privilege
Owners, staff, partner operators and platform operators receive only the roles and locations required.
Provider authenticity
Signed callbacks are checked before parsing; changed replays are rejected and exact retries are safe.
Responsible operations
Human control
Businesses can pause agents, require approval, define escalation and take over a specific conversation.
Payment separation
Payment links belong to each business. Spoken claims never replace provider-confirmed payment events.
Knowledge grounding
Only approved, fresh and audience-safe content may support an answer; insufficient evidence triggers escalation.