Webeo website personalization
Menu
Menu
Menu
Try for Free
Menu

Enterprise-Grade Security and Compliance

to protect the flow of information
Request a Demo

Secure Enterprise-Grade Platform

to serve your automation needs

Virtual assistants access critical enterprise systems to push and pull data and complete tasks for employees and customers. The platform offers superior security, resistance from vulnerabilities through highly secure protocols and enterprise-grade encryption.

Virtual Assistant Security

Kore.ai follows stringent guidelines for security and compliance, including regular scans for vulnerabilities. Intrusion detection and file integrity agents monitor the server continually.

The cutting-edge security incident and event management (SIEM) system ensures superior security. Our team analyzes and monitors security alerts, threats, and possible attack vectors 24/7.

Multiple Layers of Authentication

The platform provides the ability to rigorously verify user identities on a global or channel-by-channel and automatically accounts for channel-specific authorization and authentication nuances. Combine authentication methods to create a layered defense system that protects your enterprise and users.

Single Sign-On

The platform leverages industry-standard SSO solutions to grant users access to an organization’s enterprise virtual assistant store and enterprise systems. Supported integrations include SAML (OKTA, Onelogin, BITIUM), WS-FED, Ping Identity, and OpenID Connect.

Integrated Authentication and Authorization

Leverage Basic Auth, OAuth, or API keys for user authentication and authorization before assistants can deliver alerts or take actions against integrated systems.

Complete Protection for Sensitive User Data

The platform allows you to redact any personally identifiable information (PII) and sensitive personal information (SPI) shared with your virtual assistants, such as contact information, credit card numbers, home addresses, and more, by transforming its value into a pattern that doesn’t contain comprehensible data.

The platform provides redaction, replacement and character masking methods to protect user information.

Enterprise-Grade Encryption

  • Secure Messaging:

    The platform uses the maximum encryption available for each channel when transmitting user, virtual assistant, and system data.

  • Secure Data at Rest:

    Application data is protected using cutting-edge HSM managed cryptographic keys and AES-256 encryption. For on-premise deployments, customers can instead use the HSM that best meets their unique security and operational needs.

  • Enterprise Access to Encryption Keys:

    Administrators have access to the tenant-specific encryption keys and can rotate keys on-demand as needed. The platform gives administrators complete visibility of messages, regardless of communication channel.

Total Visibility and Control

securely connect to the cloud and on-premise systems

Compliance Across the Board

Kore.ai is dedicated to providing our customers with best-in-class security, compliance, and data protection and a platform that is backed by robust infrastructure. We maintain rigorous internal security practices, regularly engage third-party external penetration experts to test our network security, and routinely refine our technical, administrative, and physical safeguards to provide a safer environment for all your assistants.

Within the Kore.ai Enterprise Optimization Platform, use the built-in tools to retain, monitor, and manage assistant-based messages.

  • Data Retention: Maintain compliance by automatically retaining user-bot messages and other data for information governance purposes.
  • eDiscovery/Legal Hold Management: Identify, collect, and extract user-bot messages and audit logs and provide secure custodian access to the findings.
  • Archiving/Exporting: Leverage third-party solutions to archive and manage user bot conversations exported from the Kore platform.
  • Audit Logging:  The platform maintains a comprehensive chronological record of key system events, such as password policy changes and bot deployments.

Compliance

  • SOC2 Type2 Kore.ai gets audited for SOC2 Type2 compliance annually and has maintained its SOC2 attestation since 2016. Kore.ai’s latest SOC2 Type2 report can be shared on request, upon NDA.

  • GDPR Kore.ai provides all security controls necessary to support the European Union’s General Data Protection Regulation (GDPR) and its services are hosted in environments which are members of EU-US Privacy Shield.

  • PCI DSS & HIPAA Kore.ai provides all security controls necessary to support PCI compliance & HIPAA. Kore.ai services are currently provided in accordance with all statutory and mandatory requirements envisioned under HIPAA and PCI DSS.

Automate Enterprise Experiences

Request a Demo
Analytics
Scalability
Build a virtual assistant Check our our developer community
Menu
Kore.ai Named a Leader in 2022 Gartner® Magic Quadrant™ for Enterprise Conversational AI PlatformsGet the ReportBook a Consultation