A chatbot on your website or social channels handles real conversations with real customers — sometimes including contact details, sometimes more. It's worth asking a few specific questions before choosing where that data goes.
On a multi-tenant platform (one backend serving many businesses), ask explicitly whether your knowledge base and conversation history are isolated from other clients, or whether data could ever mix. This should have a direct, specific answer — not a vague reassurance.
If you connect Slack, a CRM, or social media accounts, those access tokens are real credentials. Ask whether they're encrypted at rest, not just protected by a login screen.
Understand who at the vendor's company can access your actual customer conversations, and under what circumstances — this matters more than most buyers think to ask about upfront.
Every client's assistant, knowledge base, and conversation history is fully isolated from every other client — nothing is shared or mixed between businesses. Every connected credential (Slack, HubSpot, social channels) is encrypted at rest with AES-256, not stored in plain text. More in our security post.