Your business and your customers trust you with sensitive conversations. We take that seriously — with encryption everywhere, isolated workspaces, and privacy built into every layer.
Security built into every layer
How we protect you
From the network to the database to the people who can touch it — protection is designed in, not bolted on.
All traffic is encrypted in transit with TLS 1.2+, and your data is encrypted at rest on Google Cloud. Credentials and secrets are never stored in plain text.
AssistantLabs runs on Google Cloud and Firebase — infrastructure independently certified to ISO 27001 and SOC 1/2/3, with continuous monitoring and automatic failover.
Production access is limited to authorized engineers behind strong authentication. Every workspace is isolated, so one business can never see another's data.
You own your data. We process it only to run your agents, never sell it, and honor export and deletion requests. Built-in marketing-consent tracking keeps you compliant.
Card payments are handled entirely by our PCI-DSS certified processor (Tranzila). AssistantLabs never sees or stores full card numbers.
Our product meets WCAG 2.0 AA / IS 5568 accessibility standards, and messaging runs on the official Meta WhatsApp Business Platform — no gray-market gateways.
Data handling
Clear, honest rules about what happens to your data — and what never does.
We never sell or rent your data, and we don't use your customers' conversations to train third-party AI models.
Each organization's contacts, conversations and settings are logically separated. No cross-tenant access.
Ask us any time and we'll export your data or permanently delete it, in line with GDPR and Israeli privacy law.
Data is backed up on Google Cloud with encryption and retention controls, so nothing is lost.
Infrastructure
A short, honest list of the trusted providers that help run the service.
Stores app data and runs the backend. ISO 27001 / SOC 2 certified.
Delivers WhatsApp, Instagram and Messenger messages via the official Business APIs.
PCI-DSS certified processor that handles all card billing.
Generate responses via API. Your data is not used to train their models.
Questions
Where your data lives, how it's protected, and what we will — and won't — do with it.
Ask us on WhatsAppRead our privacy policy or talk to our team — we're happy to walk you through exactly how we protect your data.