Security
Built to be trusted with your store
Havio handles your orders and your customers’ conversations, so security is designed in from the first line of code.
Data protection
- TLS 1.2 or 1.3 for every connection
- Encryption at rest with dedicated keys for databases, storage, backups and logs
- Channel access tokens encrypted at the application level
- Hosted on AWS in the EU (Stockholm)
Accounts and access
- Multi-factor authentication, which owners can require for the whole team
- Roles and permissions for every action, including approvals for refunds
- Passwords stored with a modern one-way hash
- An audit log of sign-ins, changes and actions
Isolation and integrity
- Each store’s data is isolated from every other store’s, enforced in the database itself
- Every message from Meta is verified by its signature
- Files shared in conversations are checked before they are shown
- A web application firewall and rate limits in front of the service
AI safety
- AI providers receive only what an answer needs
- Your data is not used to train AI models
- Sensitive actions wait for a person with the right role
- Shoppers are told they are talking to an AI and can ask for a person
Report a vulnerability
Found something? Email security@havio-ai.com. We reply within two working days and credit researchers who report responsibly.
You have a store to run. Let Havio help.
Set up Havio on your WooCommerce store this afternoon. Your whole team is included.