Security & isolation

Security, taken seriously.

AICPA SOC for Service Organizations — aicpa.org/soc4so CWS Software's SOC 2 audit is conducted annually. Contact sales for more information.

Per-tenant data isolation.

Each company's documents, vector index and conversation logs live in their own database — never shared across tenants.

Encrypted at rest.

Connected channel credentials are encrypted before they ever touch disk.

Verified channel traffic.

Inbound Slack® messages are signature-verified; Teams messages are verified against Microsoft's own identity platform.

No passwords to leak.

Employees sign in with a one-time code sent to a verified work email or phone number — nothing long-lived to phish.

Questions about security or compliance?

We're happy to walk through Hannah's architecture with your IT or security team.

Talk to Sales →