Security
Last updated 15 November 2026
How Retriage keeps each company's questions and answers separate and safe, and which outside services handle them. For what is stored and for how long, see the privacy policy.
Keeping companies apart
- Every row in the database belongs to one organisation, and every read and write in the code goes through a module bound to that organisation. Automated tests check each of those functions against a second organisation on every change.
- Row level security is switched on for every table, so the public database key can read nothing.
- The answer engine only searches the asking company's own knowledge base. One company's data never informs another company's answers.
Access
- Sign-in is through Google or Slack only. Retriage stores no passwords.
- Three roles: owners, admins and agents. Only admins change settings and the knowledge base; only the owner can delete the organisation.
- Team actions are recorded in an audit log. Each conversation shows who took it, replied and resolved it.
- The website chat only loads on the sites a company lists, and each chat session is signed so it cannot be moved to another site or visitor.
Protecting data
- All traffic uses HTTPS. The database is encrypted at rest by its provider.
- Slack access tokens are encrypted with a separate key before they are stored.
- Incoming Slack and email events are checked for a valid signature before anything is done with them.
- Customer content is not used to train AI models. The AI model never sees more than the question, its conversation and the relevant entries from the same company.
- Each company chooses how long conversations are kept (1 to 12 months) and can delete a conversation, a person or the whole organisation at any time.
Subprocessors
These services handle customer data to run Retriage.
| Service | What it does | Where |
|---|---|---|
| Supabase | Database and sign-in. Stores accounts, conversations, the knowledge base and settings. | United States (us-east-1) |
| Vercel | Runs the application and the website chat. | United States (Washington, D.C. region) |
| Groq | AI model that decides whether a question can be answered and writes the answer. | United States |
| Voyage AI (MongoDB) | Turns knowledge base entries and questions into search vectors to find relevant answers. | United States |
| Resend | Receives forwarded support email and sends replies and team notices. | United States |
| Slack | Only for teams that connect it: receives and posts messages in their own workspace. | United States |
If this list changes, signed-in owners are told by email before a new service receives their data.
Reporting a problem
If you think you have found a security issue, write to shubhamdolas99@gmail.com with the details. You will get a reply within two working days. Please do not test against other companies' data.