Security & trust

Built to protect every conversation

Your customers share personal details, payments, and appointments with Simplexi. Here is how we keep that data, and the AI agents that handle it, under your control.

Platform security

The foundations every Simplexi workspace runs on.

Isolated workspaces

Every organisation’s conversations, contacts, and settings are scoped to its own workspace, from the database to search and caches.

Encrypted credentials

Integration tokens and provider keys are encrypted at rest and redacted from logs. All traffic to Simplexi is served over HTTPS.

Built on AWS

Simplexi runs on Amazon Web Services, with monitoring, alerting, and automated recovery jobs that keep conversations and billing consistent.

Access control

Decide who can see and change what — including our own support team.

Roles and permissions

Built-in Agent, Team Lead, and Admin roles, plus custom roles with fine-grained permissions for AI, campaigns, billing, and settings.

Single sign-on

SAML and OIDC single sign-on on the Ultimate plan, with optional or required enforcement for your verified domains.

Supervised support access

Our team can only see your workspace when an admin grants it — read-only, time-limited, recorded, and with admins notified by email.

Privacy by design

Tools that help you meet your obligations to customers in every market you serve.

Data subject requests

Export or erase a contact’s data on request to support GDPR, NDPR, POPIA, and similar privacy laws.

Retention and deletion

Data retention runs automatically, and closed organisations are deleted after a defined retention period.

Consent and do-not-contact

Channel consent is tracked per contact, and an organisation-wide do-not-contact list is respected by every campaign.

Responsible AI

AI agents speak for your business, so you control what they say and what they can reach.

Guardrails and grounding

Input and output rules run before a reply is sent or spoken. Strict grounding keeps answers to your approved content.

Scoped AI assistant access

Claude, ChatGPT, and other MCP clients only connect through an OAuth consent screen, with read or read-and-write scopes admins can revoke.

Spending limits

Set usage limits and warning thresholds for AI, voice, and messaging so costs stay within the budget you choose.

Security questions

Where is my data stored?

Simplexi is hosted on Amazon Web Services. If you have specific data-location requirements, contact our team before you sign up so we can talk through your needs.

Can I choose which AI models process my conversations?

Yes. Each AI agent can be set to use a specific language model, speech-to-text, and voice provider. On Pro plans and above you can also bring your own provider keys.

Does your team have access to my workspace?

Only if an admin in your organisation grants it. Support access is read-only, expires automatically, is recorded, and notifies your admins by email.

How do I report a security issue?

Email support@simplexi.com with the details and we will respond as quickly as possible. Please do not share vulnerabilities publicly until we have had a chance to fix them.

Have a security review to complete?

Book a call and we’ll walk your team through how Simplexi handles data, access, and AI.