Kept with care

Stored in Canada

ATON Desk's database is hosted in Toronto, Canada. Conversations, contacts and workspace settings are kept there.

Isolated per workspace

Every record belongs to one workspace. The separation is enforced inside the database itself, not only in our application code, with a second layer of row-level security behind it. Our automated tests check that one workspace cannot read another's records.

Access controls

You decide who on your team sees what.

• Teams and roles per workspace, so each operator sees the queues they answer
• Verified identity for signed-in customers, from a token your own server signs
• Single sign-on and an audit log on the Enterprise plan
• ATON Desk staff open a conversation only when you ask for help with it, or to keep the service safe and running

Retention controls

You choose how long conversations are kept.

• Two years after the last message by default, or your plan's limit if that is shorter
• Any period from 30 days up to 1 year on Free and Starter, and up to 3 years on Team and above
• A conversation needed as evidence can be held to a date you set, at most 7 years
• Visit details such as the page and browser are deleted after 90 days
• Erasure of your workspace's data, and an export on request

AI with limits

The AI agent works inside rules your team sets.

• Visitor messages, scanned pages and uploaded files are treated as information, never as instructions
• An AI action that would change something waits for the customer to confirm it
• Past chats are used for training only after a person approves them
• A spending cap per workspace