Your company knowledge should stay your company knowledge.
BizBot is built to become part of how your company operates. That means it may hold processes, procedures, employee responsibilities, company rules, documents, communications, and other important business knowledge.
We take that seriously. Security is built into the way BizBot is designed, not added as an afterthought.
THE MAIN IDEA
Protect the company’s knowledge without taking control away from the company.
Security inside BizBot is not just about keeping outsiders out. It is also about making sure the right people inside the company have the right level of access and authority.
That means separating company workspaces, controlling permissions, requiring confirmation where appropriate, keeping important activity traceable, and designing AI so understanding a request is not the same as having permission to execute it.
HOW BIZBOT PROTECTS COMPANY KNOWLEDGE
Security that makes sense to the people running the business.
The controls are designed to be strong without turning BizBot into another complicated system your team has to manage.
PRIVATE WORKSPACE
Your Company Has Its Own Private Workspace
Each business operates inside its own BizBot company workspace. Company information is separated by company, and access is controlled based on authenticated users, company membership, and permissions.
A user from one company should not be able to access another company’s private Company Brain, documents, Actions, or internal information.
ROLE & AUTHORITY
Access Based on Role and Authority
Not every employee needs access to everything. Owners and managers can control who belongs to the company and what level of authority they receive.
Important permissions are protected through backend security controls — not simply by hiding buttons on a screen.
CONFIRMATION
Important Actions Require Confirmation
BizBot is designed to help people take action without removing human control. Normal operational commands can require confirmation before BizBot sends messages, creates assignments, or performs other actions.
Higher-risk actions involving financial commitments, pricing, contracts, refunds, warranties, legal language, or significant customer commitments can require an additional level of confirmation.
ACCOUNTABILITY
Activity Can Be Traced
BizBot is designed to maintain an audit trail of important activity. Company leadership can see information such as:
This can include changes to Company Brain knowledge, assignments, approvals, removals, communications, and other governed activity.
FILES & RECORDINGS
Private Company Files
Documents and recordings uploaded into the Company Brain are stored in private company storage. Access is controlled through authenticated company permissions rather than public file access.
DATABASE CONTROLS
Database-Level Security
BizBot uses Supabase and PostgreSQL as part of its backend infrastructure. Access controls can be enforced directly at the database level in addition to the permissions used throughout BizBot.
Important company operations are also protected through governed server-side functions so sensitive business rules do not depend only on what appears on the user’s screen.
THE TECHNICAL FOUNDATION — IN PLAIN ENGLISH
Modern infrastructure underneath. Clear expectations on top.
You should not need to be a cybersecurity professional to understand the basics of how your company information is being protected.
SECURE INFRASTRUCTURE
BizBot is built on infrastructure provided by Supabase.
Supabase provides the hosted backend services BizBot uses, including PostgreSQL database infrastructure and related security controls.
These certifications apply to Supabase’s infrastructure and should not be interpreted as BizBot itself currently being SOC 2 or ISO certified.
BACKUP & RECOVERY
Production data is backed by managed recovery capabilities.
BizBot’s production infrastructure includes managed database backup capabilities. Our backup and recovery practices will continue to evolve as the platform grows and as customer protection requirements increase.
CONTINUOUS IMPROVEMENT
Security practices should evolve as the product and customer base grow.
As BizBot grows, we plan to continue strengthening our security, testing, policies, operational controls, and compliance practices.
BUILT FOR TRUST
Your company should be able to benefit from AI without giving up control of your company.
That is the standard we are building toward: protect the knowledge, respect authority, keep important activity traceable, and make it clear what BizBot is allowed to do.
Trust first. Intelligence second. Action with control.
SECURITY QUESTIONS?
Have specific security, privacy, or compliance requirements?
Contact BizBot before deployment so we can review your requirements with you and make sure expectations are clear before your company puts sensitive information into the system.