Security

Last Updated: April 30, 2026•Version 1.0

1. Our Commitment to Security

At BotraAI, security is foundational to everything we build. We protect your data, your chatbots, and your customers' information with industry-standard practices, encryption, and continuous monitoring.

2. Data Encryption

  • Encryption in transit: All data is encrypted using TLS 1.3.
  • Encryption at rest: Data stored in our databases is encrypted using AES-256.
  • API security: All API endpoints require authentication via secure tokens or API keys.

3. Infrastructure Security

  • Hosting: Our platform is hosted on secure, SOC-compliant cloud infrastructure with DDoS protection, firewalls, and intrusion detection.
  • Access control: Strict role-based access controls limit internal access to production systems.
  • Monitoring: 24/7 automated monitoring for suspicious activity, anomalies, and potential threats.

4. Authentication & Access

  • User authentication: Powered by Clerk, a SOC 2 Type II certified authentication provider with support for multi-factor authentication (MFA).
  • API keys: Users can bring their own OpenAI API keys — BotraAI never stores or logs your API credentials.
  • Team access: Granular role-based permissions for team members (Admin, Editor, Viewer).

5. AI & Data Privacy

  • Your data is yours: We do not use your chatbot training data, conversations, or uploaded documents to train AI models.
  • Data portability: Export your chatbot data, conversations, and leads at any time.
  • Deletion: Deleting a chatbot permanently removes all associated data from our systems.

6. Vulnerability Disclosure

We welcome responsible disclosure of security vulnerabilities. If you discover a security issue, please email us at support@botraai.com. We commit to acknowledging reports within 48 hours and providing a timeline for resolution.

7. Compliance

BotraAI is committed to maintaining industry-standard security practices. We are actively working toward SOC 2 Type II certification. Our authentication provider (Clerk) and infrastructure providers maintain SOC 2, ISO 27001, and GDPR compliance certifications.

8. Contact

For security-related questions, concerns, or vulnerability reports, contact us at:

Email: support@botraai.com