Access protection
Workspace and role isolation, protected session/cookie mechanisms, optional TOTP 2FA, active-session management and scoped operator permissions.
Data and network protection
TLS in transit, encryption of sensitive integration secrets at rest, Cloudflare edge/WAF protection, rate limiting, origin/domain validation for the visitor widget and server-side verification of payment notifications.
Reliability
Controlled backups and retention, health checks, event logging, separated application/database services and recovery procedures. Customers can control supported retention settings.
Incident response
Confirmed incidents are investigated, contained and documented. Incidents involving Customer Personal Data are handled under the notification commitments in the DPA.
Boundaries of compliance claims
TalkThem does not claim SOC 2, ISO 27001, HIPAA or other independent certification unless that certification is expressly published. Use for specially regulated data, including PHI, requires separate assessment and any required specialist agreement.