Chatbot Security and Privacy

# Chatbot Security and Privacy

Document360 is committed to handling chatbot data securely and in compliance with global privacy regulations.

Data Handling

• Conversation Logs – Stored on Document360's secure cloud infrastructure.
• User Identification – By default, conversations are anonymous. You can enable user identification for logged-in portal visitors.
• Query Data – User queries are processed to generate answers and may be logged for analytics purposes.

Data Encryption

• All data transmitted between the user's browser and Document360 servers is encrypted using TLS 1.2+.
• Data at rest is encrypted using AES-256.

Compliance

Document360's Chatbot is designed to support compliance with:

• GDPR (General Data Protection Regulation)
• CCPA (California Consumer Privacy Act)
• SOC 2 Type II

Access Controls

• Only project Admins and Owners can access conversation history and analytics.
• Role-based access controls prevent unauthorized configuration changes.

Data Retention

Anonymization

You can enable Query Anonymization to strip personally identifiable information (PII) from conversation logs before storage.

Summary

Document360's security-first approach ensures that chatbot interactions remain private, encrypted, and compliant with industry standards.