Tenant isolation
Customer, conversation, knowledge, commerce, automation, and audit records are scoped to the active workspace. Permission checks and tenant filters are applied before app data is read or changed.
resolti TRUST CENTER
Built for governed customer operations.
Understand how resolti isolates workspace data, protects connected credentials, controls AI and commerce actions, and gives merchants a clear path to their data.
Protected connections
OAuth credentials and connection secrets are encrypted before storage. Tokens are never shown in tenant pages, help documentation, AI prompts, or public telemetry.
Governed actions
Shopify changes follow eligibility, permission, policy, approval, execution, verification, and audit checks. A recommended response does not silently grant commerce authority.
Controlled learning
Workspace IQ uses tenant-private policies, products, verified context, and governed outcomes. Learned response behavior uses identity placeholders so customer greetings and sender signatures remain dynamic.
Purpose-limited context, visible controls
resolti retrieves only the context needed to understand and resolve a customer request. Routine patterns can be handled locally; ambiguous or sensitive cases can use an external AI provider under the workspace's configured guardrails.
Connected channels import tenant-scoped customer requests with idempotency and delivery telemetry.
resolti IQ assembles verified order, customer, knowledge, policy, and agent context into a versioned resolution packet.
Confidence, risk, required facts, permissions, and approval limits determine whether work is local, supervised, or escalated.
Replies, approvals, governed actions, corrections, and administrative changes retain an attributable workspace audit trail.
Access and data requests
- Role-based workspace access
- Tenant-owned integrations and approval limits
- Audited workspace export requests
- Reviewed deletion requests that never execute from one click
Audited infrastructure, clearly scoped
resolti's primary production application runs on DigitalOcean's independently assessed cloud infrastructure. Our Trust Center clearly distinguishes the controls provided by our hosting partner from those operated directly by resolti, so teams can evaluate the service with accurate, useful information.
Ask a security question →Providers, retention, and support
Capabilities use only the providers relevant to the merchant's configured product and connections.
Current service categories
- DigitalOcean · primary application and managed infrastructure
- Google · Gmail connection when authorized by a tenant
- Shopify · commerce data and governed actions when connected
- Stripe · subscription checkout and billing portal
- OpenAI · contextual AI only when resolti IQ routing requires it
This list describes current service categories, not provider endorsement or resolti certification.
Retention and deletion
Operational workspace records are retained while the service is active and as needed for security, audit integrity, billing, backups, or applicable obligations. Workspace owners can request an export or deletion review from Launch Center. Deletion is deliberately reviewed rather than executed from one click.
Read the data request guide →Support expectations
Workspace support is available at support@resolti.com. Public status reports monitored service health; Launch Center reports tenant-specific message telemetry. A contractual response time or service-level commitment applies only when it is expressly included in the customer's agreement.
RESPONSIBLE DISCLOSURE
Email security@resolti.com →
Found a security concern?
Send a clear description, affected URL, reproduction steps, and impact. Do not include customer content or credentials in your first message.
