Security you can check

Workspace isolation

Every workspace is single tenant. It gets its own storage bucket and its own search index, and queries are scoped to the workspace that owns them, so content from one workspace can never surface in another.

Access inside a workspace is governed by roles. Admin only actions such as connecting an integration or changing billing are enforced on the server, not just hidden in the interface.

Credentials and secrets

Integration credentials, including OAuth refresh tokens and store API keys, are encrypted with AES-GCM before they are written to the database. They are decrypted only in memory, only to make an API call on your behalf.

We never ask for your account password to any third party service. Every connection is either an OAuth grant you approve, or a key you generate and can revoke.

What we connect to, and how much we ask for

We request the narrowest scope that makes a feature work.

• Google Search Console and Google Analytics 4 are connected read only. Kooga can read your reports. It cannot change your properties.
• Google, Meta and TikTok Ads are connected read only for reporting. Kooga does not create, edit or spend on campaigns.
• Store connections read products, pages, policies and orders so the agent can answer accurately, and write only the things you asked for, such as publishing an article or adding an item to a shopper's cart.
• You can disconnect any integration at any time from the settings page, which revokes the stored credential.

Your data is not training data

We do not train models on your content, your catalogue, your customers or your conversations, and we do not permit our model providers to do so with data we send on your behalf. Your data is used to serve your workspace and nothing else.

The storefront agent

The agent runs on your site from a single script tag and is constrained on purpose.

• Domain allowlisting, so your key cannot be lifted and used on another site.
• Rate limits and per conversation caps.
• Order details are released only after the shopper proves ownership with a code emailed to the address on the order. Those details never enter the chat transcript.
• Answers are grounded in your own content. When the agent cannot answer from what you have published it says so and routes the question to your Inbox rather than inventing one.

Infrastructure

Kooga runs on managed cloud infrastructure with encryption in transit over TLS and encryption at rest. Backups are managed by our database provider. Administrative access to production is limited to the people who need it to operate the service.

Reporting a vulnerability

Write to security@kooga.io with enough detail to reproduce the issue. We will confirm receipt quickly, keep you updated while we fix it, and credit you if you would like. Please do not test against other customers' workspaces or run denial of service tests.

What we do not claim

We are a young company and we would rather be accurate than impressive. We do not currently hold SOC 2, ISO 27001 or any other third party security certification, and we will not imply otherwise. If your procurement process needs a questionnaire completed, write to security@kooga.io and we will answer it honestly.