HandovarYour data stays yours.
Handovar handles your customers' conversations, so we treat that data carefully. Here's plainly how it's stored, who can see it, and what we will and won't do with it.
Six things we do, every day.
Encrypted in transit and at rest
Every connection is served over HTTPS/TLS, and data is encrypted at rest in our managed Postgres database. Nothing travels or sits in the clear.
Strict tenant isolation
Each workspace's data is separated with row-level security in the database, so one customer can never read another's conversations, knowledge, or contacts.
Never sold, never used to train our models
We use your content and conversations to run Handovar for you. We never sell your data and never use it to train our own models. Replies are generated by our AI providers, who process messages under their own terms, as set out in our Privacy Policy.
Secure sign-in
Authentication, sessions and password resets are handled by a managed auth provider with hashed credentials. We never store your password in plain text.
You can delete it
Your knowledge base and conversations are yours to export or remove. Delete your workspace and its data is removed from our systems.
Trusted infrastructure
We run on well-established cloud providers for hosting, database and AI, with their own strong security programmes, rather than rolling our own.
A note on where we are
Handovar is a young product, and we're direct about it: we're not yet SOC 2 or ISO 27001 certified. What we can promise today is the discipline above: encryption, isolation, least access, and never monetising your data. If your organisation has specific security or data-residency requirements, talk to us and we'll tell you honestly what we can meet.
See also our Privacy Policy and Terms.
