Security
What we do with your data and what the AI is allowed to do.
This is what Interlinked AI does today to protect your account, your customers' payments and your conversations, checked against the code on October 10, 2026. We also tell you what we don't have yet.
- Card details are entered on Stripe's pages
- Every action is checked against your business and your role
- The AI can't mark an order as paid
Your account and your team
Everyone sees what they should
You sign in with email and password, or with Google. On every request we check that you belong to that business and what your role is, using data read at that moment: if you remove someone from the team, they lose access on their next action.
- Passwords stored with bcrypt, and a verified email to sign in
- Sessions in secure cookies; changing your password signs out your other sessions
- Sign-in attempts are rate-limited, and you get an email for every new sign-in
- Owner, Admin, Agent and Viewer; nobody can remove the owner
Payments
Your customer's card never passes through us
Card details are entered on Stripe's pages and never reach Interlinked AI's servers. A card payment counts as paid only when Stripe confirms it; a bank transfer is checked by a person on your team.
- The AI can't mark an order as paid: it only sends the receipt for review
- Payments land in your own Stripe account (Stripe Connect)
- Stripe's notifications are verified by their signature before we process them
Connections and files
Your channels, connected the official way
WhatsApp, Instagram and Messenger connect through Meta's official API. Every notification from Meta is verified by its signature before we process it, and your channels' access tokens are stored encrypted (AES-256).
- Files in your conversations are private and open through links that expire after an hour
- You choose which channels to connect, and you can disconnect them
The AI
The AI works inside the limits you set
Each step of your agent's workflow defines which tools it can use, and the server checks again. Business actions, like creating an order, booking an appointment or recording a receipt, go through your business's rules before they run.
- You choose which actions wait for your approval
- Pause the AI in one conversation or across your business
- Prices and stock come from your catalog; the order total is calculated by the server
- Handing the conversation to a person is always available
What we don't have yet
No fine print
We're a small team. This is what's still missing, so you know before you sign up.
-
Do you have SOC 2 or ISO 27001?
We don't have any security certification yet. If we get one, we'll publish it on this page.
-
Can I delete my account from the panel?
There's no button for it yet. You request it by email, as the data deletion page explains, and we process it.
Data deletion -
Can I export my data?
Today you can export orders and products as CSV. For the rest of your information, write to us.
-
Is there an activity log?
Your agents' decisions and tasks show in AI Activity. Password, email and role changes are recorded, but there's no screen to see them yet.
-
Which AI models read the conversations?
The model you choose for each agent: GPT models run on Azure OpenAI and Gemini models on Google's API.
Security
Have a question that isn't here?
Write to us and we'll answer with what the product does today, without overpromising.