SwepetyTrust center

Security approach

A role for AI.
Control for people.

Thoughtful boundaries, considered connections, and a clear place for your team.

Updated
Clear boundaries. Human judgment.
Your knowledge Your rules
AI assists Answers & next steps
People decide Context & exceptions
Outside the agreed scope?
Bring in the team.

A design principle. Configured for your workflow.

Trust comes from understanding the workflow. Here are the questions that shape the AI systems we build with you.

Start with the system you actually need.

A chatbot answering customer questions, a voice agent taking calls, and a quoting tool preparing offers need different information, access, and controls. Security requirements are considered in the context of the workflow we agree to build.

Scoping covers the data involved, the connected tools, who has access, and which actions need approval. Ask us for the details relevant to your implementation.

This page describes our approach to planning custom systems. Specific controls, service commitments, and provider arrangements are defined for each project.

Give the system a clear role.

Approved knowledge

Define the business information the assistant should use, and who keeps it current.

Agreed actions

Specify what can be answered, updated, scheduled, or sent within the workflow.

A human handoff

Choose when your team takes over, including unclear requests and sensitive situations.

A way to pause

Plan how to stop a workflow, investigate an issue, and decide what should resume.

AI responses can be wrong or incomplete. Testing and human review remain important even when a response sounds confident.

The right information. The right access.

  • Data requirements: identify which contact details, conversations, and records the workflow actually needs.
  • Access permissions: decide which people and systems need access to each connected service.
  • Credentials: agree how connections are authorised, maintained, and removed.
  • Retention: document what is retained, where it lives, and how export and deletion requests are handled.

Our privacy policy explains the types of information involved and how to contact us about your data.

Look at the whole chain.

AI, hosting, messaging, telephony, CRM, and calendar services can all be part of a workflow. Each connection adds its own settings, permissions, and service conditions.

Provider review

Consider the proposed provider’s data handling, processing locations, retention settings, and available security documentation.

Connection review

Check the access and validation needed for information to move between the services in scope.

Available controls depend on the providers, plans, and architecture selected for your project.

Confidentiality comes as standard. Client work is covered by non-disclosure agreements, and access to your systems and data is limited to the team delivering your project. It is one reason much of our work is never published.

Keep the person in the conversation.

A useful sales or support system needs clear contact permissions and a way to respect a customer’s decision.

  • Establish the permissions and disclosures needed for the channel and audience.
  • Define how replies, opt-outs, and objections affect the next message.
  • Plan when a conversation moves to a person and what context goes with it.
  • Review what each connected tool may store or share before enabling it.

These decisions belong in the workflow design and project responsibilities.

Review the flow. Learn from the exceptions.

Testing should cover ordinary requests, missing information, failed connections, opt-outs, and questions the assistant should hand over. The project scope defines testing, monitoring, and any ongoing support.

For a security question or suspected vulnerability, email security@swepety.com. Include the affected page or workflow, what happened, and steps that help us understand the issue.

Please leave customer data, passwords, and access tokens out of your initial report. We can discuss an appropriate way to share any sensitive details that are needed.

A real person. A clear answer.

Let’s make it clear.

Discuss the controls your business needs, or report a concern about a Swepety system.

security@swepety.com

Step 1 of 4

What do you need help with?

Select all that apply — most owners pick three.