Security and trust
How Allied Spot protects your account: two-factor sign-in, an audit log, encrypted credentials, workspaces kept apart, data retention on a schedule and a published DPA. SOC 2 and HIPAA readiness is in progress.
- Two-factor sign-in. Anyone can add an authenticator app to their sign-in, and the server refuses a session that skipped the second step. An owner can require it for the whole workspace.
- An audit log. The account keeps a record of who changed what and when. Every instruction given to Sophia, and every action she takes, is logged.
- Encrypted credentials. Passwords and keys for the accounts you connect, such as email and calendars, are encrypted before they are stored.
- Workspaces kept apart. Every record belongs to one workspace. Customer tables carry database row-level security policies, a second layer behind the application's own checks.
- Data retention on a schedule. Scheduled jobs remove old call recordings, e-signature files, faxes, captured media and email event logs once their retention period ends.
- A data processing agreement. Our data processing agreement is published, so your team can review it before you sign up.
- SOC 2 and HIPAA readiness in progress. We are working toward SOC 2 and HIPAA readiness. We do not hold a SOC 2 report or a HIPAA attestation today, and we will say so plainly until we do.
See pricing · Every feature · Meet Sophia · Security and trust