Security and data

Where your data lives

Connectera runs either in your own AWS account or in an environment dedicated to your company in our European data centres — Frankfurt (eu-central-1) by default, never shared with another client. Requests, conversations, emails and the knowledge base are stored there. When it runs in your account, Madarion keeps no copy on its own systems.

Who can reach it

Agents sign in with their usual company account through your identity provider (SAML), with no separate password to manage. Access to the AWS account follows your own policies.

Customer identity

In the chat, the customer's identity comes from your website's own sign-in and is signed before it reaches the contact center, so a visitor cannot chat as someone else.

What the AI can use

The assistants reach your systems only through the API operations you enable, one by one, each with its own instructions. Operations that change data can require confirmation first, and you choose which parts of each result the customer-facing assistant receives.

Secrets

API keys, passwords and signing keys are stored encrypted in AWS Systems Manager Parameter Store. They are never written in code, in configuration files or in the deployment state.

Traceability

Every call the assistants make to your systems is logged with its input and its result, kept 7 days by default. Every release is versioned, and the running application states which version it is.

In transit

All traffic between browsers, Connectera and your systems is encrypted with TLS.

Questions from your security team

We answer security questionnaires and walk your team through the architecture. Write to contact@madarion.com