Security you can
hand to your CISO.
Encryption, isolation, role-based access, and security event logging — built into Promptly by default, not sold as an add-on.
Defense in depth, by default.
Encryption everywhere
TLS 1.2+ in transit and disk-level encryption at rest, provided by our hosting providers. Secrets and API keys are encrypted and never exposed in logs.
Per-workspace isolation
Conversations, knowledge bases, and analytics never cross tenants. Isolation plans get physically separate database schemas.
Role-based access control
Owner, admin, viewer, and agent roles — each with scoped permissions across the dashboard.
Access logging
Sensitive actions are recorded with actor, timestamp, and context for security review.
Reputable cloud infrastructure
Promptly is hosted with reputable third-party cloud infrastructure providers, who maintain their own physical and network security programmes.
Never trained on your data
Your conversations are used to answer your customers — never to train AI models.
Abuse prevention
Rate limiting and IP-level controls protect your assistants from misuse.
GDPR & right to erasure
Access, export, and delete personal data on request. Memory data expires on a schedule you control.
Need a deeper review?
Request our DPA, security whitepaper, or a call with the team.