Your conversations. Kept safe.
Customers trust you with their words. This page says what Silah Desk does to protect them, and nothing it does not do yet.
Built secure from the first line.
Encrypted in transit
Every page, API call and widget connection is served over HTTPS.
Secrets sealed
Channel tokens, AI keys and site secrets are sealed with AES-256-GCM before they are stored.
Careful with sign-in
Passwords are hashed with bcrypt. Session tokens are random, and only their hashes are kept.
Verified webhooks
Every Meta webhook is checked against its signature before a single byte is processed.
Scoped to your workspace
Owners, admins and agents each see what their role allows. The widget key can be rotated and locked to your own domains.
Signed both ways
Silah Connect signs every call between your site and Silah Desk with HMAC, so a customer's identity cannot be forged.
Yours to see, export and delete. Nothing hidden.
We have no certification badges to show yet, and we will not show one we have not earned. What we can say plainly is how your data is handled.
With your own key, the provider you choose answers your customers and bills you directly. You can switch providers at any time.
Photos, documents and voice notes go to storage you choose: an S3-compatible bucket or your own SFTP server.
Export your contacts as a CSV, or delete one, from the console at any time. Ask us to close your workspace and its data goes with it.
Subprocessors
We use a short list of providers for hosting, email delivery and AI. The full list, with what each one does, is available on request.
Responsible disclosure
Found a vulnerability? Email security@silahdesk.com. We respond within two business days and never take action against good-faith research.
Start connecting. Today.
Free to start, no credit card. Talk to us when your team needs more.