Skip to content

Security

Private by architecture. Not by settings.

Every FrenchFry customer runs in their own isolated instance. Nothing is blended across customers, and every conversation has an audit trail.

  • A dedicated instance

    Your deployment is yours alone — not shared with any other organization.

  • An audit trail on every conversation

    Every conversation is kept and every change is logged, so you always know what happened.

  • Encrypted credentials

    Keys and tokens for your connected accounts are encrypted at rest and never sent to the browser.

How your data moves

In, answered, handed over. All inside your instance.

A customer reaches out on any channel. Your agent answers from your knowledge, the conversation is saved with its audit trail, and your team picks it up — without anything crossing into another customer’s instance.

Your customer

Website chat, QR codes, decks, SMS, email and social DMs.

Your isolated instance

Your agent

Answers only from the knowledge bases you attach.

Saved and logged

Every message kept, with an audit trail.

Your team

One inbox. Take over any conversation.

What’s stored
Conversations, contacts and your knowledge bases — in your instance, nowhere else.
Who can see it
Your team, by role: Owner, Admin or Staff.
What goes out
Only replies on the channels you connect, from the senders you set up.
Where it lives
High-availability US regions by default. Custom data residency on request.

Guardrails

Safe answers, compliant sends.

AI safety

An agent that stays in its lane.

  • Answers only from the knowledge bases you attach — it knows what you teach it, nothing more
  • Anyone on your team can take over a conversation; the agent pauses while they’re in
  • Every conversation is kept, so you can see exactly what the agent said

Messaging compliance

Compliance built into every send.

  • Texting requires recorded consent, and STOP is honored automatically
  • Texts respect quiet hours, following the recipient’s state rules
  • Numbers are checked before a text is scheduled
  • Unsubscribes and do-not-contact lists are suppressed on every email send
  • Marketing email carries your business address

Access & accountability

Who sees what — on your terms.

  • Single sign-on and SAML on Enterprise plans
  • Roles for your team: Owner, Admin and Staff
  • An audit log of who changed what, when and from where
  • An audit trail on every conversation

Deployment

Standard, dedicated or on-premise.

  1. StandardEvery plan

    Isolated deployment in FrenchFry-managed cloud.

  2. Dedicated cloudCustom scope

    A custom setup for regulated industries.

  3. On-premiseCustom scope

    A custom setup — contact us to scope it.

Dedicated cloud and on-premise require a custom scope and aren’t included in non-Enterprise plans.

A compliance-ready path to SOC 2 and HIPAA.

We’re actively working toward SOC 2 Type II and HIPAA. We don’t claim what we haven’t earned — but the architecture and audit logging are already in place.

Security review

Running a security review?

Tell us what your team needs and we’ll get it to you — or walk your security team through it live.

  • Your security questionnaire, completed
  • An architecture and data-flow walkthrough
  • Answers on hosting, data handling and deployment options

Found a security issue? Choose “Report a security concern” in the form — it goes straight to the team.

What do you need?
When do you need it? (optional)

Questions

Quick answers.

Yes. Every FrenchFry customer runs in their own isolated instance, and nothing from your instance touches another customer’s, at any layer.

In high-availability US regions by default, with custom data residency on request. Every plan gets a standard, isolated deployment in FrenchFry-managed cloud; dedicated cloud and on-premise need a custom scope and aren’t included in non-Enterprise plans.

We have a compliance-ready path to SOC 2 and HIPAA: we’re actively working toward SOC 2 Type II and HIPAA, and the architecture and audit logging are already in place. We don’t claim what we haven’t earned.

Your team, by role: Owner, Admin or Staff. Every conversation has an audit trail, and an audit log records who changed what, when and from where.

No. Your agent answers only from the knowledge bases you attach. Anyone on your team can take over a conversation; the agent pauses while they’re in, and every conversation is kept so you can see exactly what it said.

Keys and tokens for your connected accounts are encrypted at rest and never sent to the browser.

We keep your data while your account is active and delete it on request.

Never miss another message.

Try FrenchFry free for 7 days, or book a demo and see it with your business in it.

Start your 7-day free trial Book a demo