Security
Built to protect your customers’ data
Support inboxes are full of names, order numbers, and account details. Here is how HallaHelps keeps that information locked to your company.
Your data stays separate
Every record that holds customer data is tied to your company, and the database enforces that with row-level security. Even if the app had a bug, the database would still refuse to show your data to another company.
Encrypted in transit and at rest
All traffic uses HTTPS. Connections to your mailbox must use TLS. Mailbox passwords and integration secrets, such as Slack and webhook URLs, are encrypted with AES-256-GCM before they are stored, and the keys are kept outside the database.
Single sign-on
Your team signs in with the Google or Microsoft account they already use, and owners choose which sign-in methods are allowed. SAML single sign-on with Okta, Microsoft Entra ID, or Google Workspace is coming to Pro.
Secure sign-in
Passwords are stored only as secure hashes. Session cookies are HttpOnly and Secure, and every protected page checks your session on the server. Owners choose whether Google, Microsoft, or emailed-code sign-in is allowed.
One person per seat
Every reply, note, and status change is tied to a real person. Shared logins aren’t allowed, and owners and admins control who has access and what role they have.
Email is treated as untrusted
Incoming email can contain hidden scripts and tricks. HallaHelps cleans every message before displaying it, so nothing in an email can run in your browser.
Safe integrations
Outgoing webhooks are signed with HMAC-SHA256 so the receiver can verify them, and they are blocked from reaching private or internal network addresses.
Private by default
No ad or tracking cookies, no third-party analytics, and we never sell data. The AI rewrite sends only the draft you ask it to rewrite, and our AI provider doesn’t train on it by default.
Trusted infrastructure
HallaHelps runs on Vercel and Supabase. Attachments are kept in private storage and opened through short-lived links.
Found a security issue?
Email support@hallahelps.com with “Security” in the subject line. We take every report seriously, will reply within 2 business days, and will keep you updated until it’s fixed.
A help desk you can trust with your customers
Start free and connect your support inbox in minutes.