Security & data protection

Your business data and your customers' conversations are handled with care.

In short

Chat4Biz hosts data in the UK (AWS London region), encrypts it in transit and at rest, and operates as a data processor under UK GDPR. Dashboard access is protected with secure, httpOnly-cookie authentication, and you can export or delete your data on request.

Where your data lives

Chat4Biz runs on Amazon Web Services in the UK (London / eu-west-2 region). Your knowledge base, conversations and account data are stored within UK infrastructure.

Encryption

All traffic to Chat4Biz is encrypted in transit over HTTPS/TLS. Data at rest — including your knowledge base and conversation history — is encrypted using AWS-managed encryption.

UK GDPR & your rights

Under UK GDPR, Chat4Biz acts as a data processor handling personal data on behalf of your business (the data controller). We process data only to provide the service, never sell it, and support data export and deletion on request. See our Privacy Policy for full detail on what we collect and why.

Authentication & access

Dashboard sign-in uses JSON Web Tokens stored in secure, httpOnly cookies — they can't be read by client-side scripts, which protects against common cross-site-scripting attacks. Each business's data is isolated from every other tenant on the platform.

Certifications & questions

We don't currently hold formal certifications such as SOC 2 or ISO 27001. If you have specific security or compliance requirements, email support@chat4biz.com and we'll be glad to help.