Security Controls You Can Review

Review encryption, access, residency options, logging, and contractual commitments for your selected plan and configuration.

AES-256Encryption

ContinuousAvailability Monitoring

TLS 1.3In Transit

24/7Monitoring

Privacy Controls

Access and deletion workflows that can support customer privacy programs.

Encryption Controls

Encryption in transit and at rest, as documented for the selected service configuration.

Data Residency

Available hosting options depend on the selected plan and service configuration.

PDPL-Oriented Controls

Configuration and governance controls designed to support customer PDPL programs.

Data protection

GDPR and PDPL compliant

Your customers' conversations are personal data. SkyLight Chat is built to the European GDPR and the Saudi Personal Data Protection Law, so you can connect a store without inheriting a compliance problem.

Encrypted in transit and at rest, with access limited to your own workspace.
A signed data processing agreement covering you as the controller and us as the processor.
Export or delete a customer's data on request, including message history.

Security at Every Layer

Ask for the controls available in your plan: infrastructure, access, logging, and testing practices.

Infrastructure Security

Cloud hosting with network isolation and monitoring options that depend on the selected architecture.

Tenant separation where supported by the architecture
Network protection controls where enabled
Vulnerability scanning as configured for the service

Access Control

Fine-grained permissions ensure your team only accesses what they need.

Role-based access control (RBAC)
Two-factor authentication (2FA)
SSO and IP allowlisting where included in the plan

Audit & Monitoring

Administrative and access logging options for the actions supported by your configuration.

Administrative audit logs for supported actions
Monitoring and alerting options where enabled
Log export options for customer review where available

Penetration Testing

Request current testing practices and any third-party assessment summaries available for your evaluation.

Ask for the current third-party testing schedule
Responsible disclosure contact for security reports
Automated scanning practices where enabled

Have Security Questions?

Ask for current security documentation and the controls available under your contract.

Talk to Security Team Read Privacy Policy