End-user identity forwarding
Forward signed-in identity via identify() so business actions run as the real user — passwords never touch Qefro.
Security
Authentication stays in your app. Qefro never stores passwords. Lead with the controls that matter: tenant isolation, encryption, identity forwarding, audit logs, and secure secret storage. SOC 2 compliance is on our roadmap — contact Sales for the current timeline.
Zero-trust style authorization
Business actions authorize with the end-user’s identity by default — not a shared organization secret.
Audit & execution logs
Conversation history and Business Tool runs stay attached for accountability and review.
Tenant & workspace isolation
Multi-tenant by design at the database and vector store level. AI Workspaces control which knowledge and actions each experience can use.
Widget JWT auth
Embeds load with short-lived widget tokens. Messages are bounded (8 KB), PII is scrubbed before model calls, and tenants cannot access each other’s data.
Encrypted secrets & secure actions
Business Tool credentials encrypted at rest. HTTPS-only outbound calls with SSRF protections and DNS-pinned webhooks.
Enterprise platform controls
Built for organizational AI — not demo chat experiences.
Access control
- Owner / Admin / Member RBAC
- Email OTP — no password storage
- Billing actions restricted to owners
- Workspace-scoped documents & actions
Data handling
- PII scrubbing on outbound LLM calls
- Never used to train AI models
- Encrypted at rest & in transit
- Conversation isolation
Action execution
- OpenAPI schema validation
- SSRF & DNS pinning for webhooks
- Per-action allow-from-public-chat toggle
- Execution logs for accountability
Enterprise roadmap
- SSO / SAML (roadmap)
- Platform admin audit trail (roadmap)
- Private deployment available today
- SOC 2 program in progress
Compliance & deployment
Enterprise customers can run Qefro in a private environment with dedicated support and custom SLAs. Contact sales for the current compliance roadmap and data processing terms.
Ready to deploy your company’s AI workspace?
Start free — no credit card required.