Skip to content
Security

Grounded answers. Guarded data.

Wiredesk is built so your customers get accurate answers and you keep control of the conversation, the data, and the spend.

Guardrails

Six things that are true on every channel.

Grounded by design

Agents answer only from your approved content. When the answer isn't in the knowledge base, they say so and take a message — never inventing prices or policies.

Human handover

Live phone transfer and one-click chat takeover mean a person is always one step away from any conversation.

Spend caps

A hard monthly cap on what you pay past your plan's included usage — $50 by default, yours to change. When the cap is reached, the agent stops answering billable conversations.

Your data, your tenant

Knowledge, conversations, contacts, and leads are scoped to your workspace and used only to answer your customers.

Encrypted in transit

All traffic is served over TLS on Cloudflare's global edge network — the same infrastructure that fronts a large share of the web.

Session-scoped access

Sign in with Google, email, or your own identity provider over SAML, with two-factor authentication and the option to require single sign-on for your domain, under owner, admin, or agent roles. Every dashboard page checks your authenticated session on the server before rendering — no session, no data.

Data handling

Plain answers about your data.

The questions every security review asks first, answered up front.

What we store
The pages you point the agent at, the knowledge you paste in, conversation transcripts, and the contacts and leads it captures for you.
Where it runs
Cloudflare Workers, D1, Vectorize and R2 — your agent answers from the edge, close to your customers. Replies are generated by Anthropic's and xAI's models, and calls are carried by Telnyx; the privacy policy lists every processor.
Who can see it
Your workspace. Conversations, knowledge, and contacts are queried per-tenant, behind your authenticated session.
Model training
Your content is used to answer your customers, not to train shared models.
Compliance

Where we are, honestly.

We're a young platform and we won't pretend otherwise. We sign a data processing agreement (DPA) with customers who need one; SOC 2 is on our roadmap. Today, we'll complete your security questionnaire, walk your team through the architecture, and put what we commit to in writing.

Start a security review

Report a concern

Found a vulnerability or have a security question? We read every report. This goes straight to the people who can act on it.

Bring your security team. We'll bring answers.