Security without the fine print

How LiveCart protects your customers' conversations and calls, in plain language.

Our approach

Private defaults, honest claims

We describe the controls we run today. We don't claim certifications we don't hold, and formal security materials go through your agreement, not a marketing page.

Controls

What's in place

01
Role-based access
Members see what their role allows; staff access is separate and audited.
02
Consent for recording
Calls are recorded only when enabled and the shopper agrees.
03
Allowed domains
Widget keys only work on the domains you list.
04
Public keys only in the browser
Installation keys are public and domain-restricted; private credentials stay server-side.
05
Guardrails on AI
Grounded-answers-only, blocked topics and required handoffs for sensitive questions.
06
Versioned changes
Agent and workflow publishes are versioned, so changes can be reviewed and rolled back.

FAQ

Questions, answered

Still curious? Ask our team

Is LiveCart SOC 2 or ISO 27001 certified?

We don't claim formal certifications on this site unless a completed audit, certificate or signed agreement supports it. Ask sales for the current security materials.

Can we sign a DPA?

Data processing terms are handled through your agreement. Contact sales to start procurement.

Is chat data used to train public models?

Your conversations are used to run your workspace. Ask us about model-provider terms for your plan.