Security and privacy

Each business is an isolated space. Every operation requires a business context, and the system denies by default any access without one.

All traffic uses HTTPS/TLS. WhatsApp access tokens are stored encrypted and are never exposed to the browser.

Dashboard access uses a dedicated authentication provider and per-business roles (owner and employee). The AI assistant runs with short-lived credentials and can only read or change the appointments of the customer it is talking to.

We only process the data needed to operate the service and do not use it to train AI models.

Every request gets a unique identifier logged together with the business and the actor, which allows auditing and incident investigation.

We use established infrastructure providers. The full list is in the Privacy Policy.

See providers →

We maintain processes to identify, contain, investigate and notify security incidents to affected businesses and, where applicable, to authorities and Meta.

If you find a vulnerability, email support@3alphaia.com. Please do not disclose it publicly until we have fixed it.

We do not claim certifications such as SOC 2, HIPAA or ISO 27001 unless expressly stated in writing.