Security
Built to keep your team safe
AppChat is designed for professional teams that need private chat, meetings, and AI assistance without compromising security.
Authentication
Sign-in uses passwordless magic links and one-time codes. We do not store account passwords. Sessions are HTTP-only cookies with secure defaults.
Access control
Workspaces are multi-tenant. Members only see channels they belong to. Private channels and DMs stay hidden from people outside those conversations. Role-based admin tooling covers invites, settings, and moderation.
Data in transit & at rest
Traffic is served over HTTPS. File uploads go to private object storage with signed access. Meeting media rides on LiveKit with encrypted WebRTC paths.
AI features
Brand Agent and MCP connectors run only in workspaces that include AI on their plan. API tokens can be revoked at any time from Connect AI settings.
Report a concern
If you find a vulnerability or need a security questionnaire, email support@appchat.com.