99.99%
Enterprise uptime SLA with credits
Deploy the channel set inside your perimeter
Host the platform on your own servers or choose isolated single-tenant cloud storage. Data residency is contractual across our datacentres in the EU, the UK, the United States, and the Gulf region.
4 regions
EU, UK, US, and Gulf data
VPC or on-prem
Self-hosted deployment
BYOK
KMS and Vault encryption
Control where every message and key lives
Your security team defines the perimeter and controls the cryptographic keys. We install the software across bare metal, private clouds, or isolated virtual private cloud clusters.
Self-hosted VPC or bare metal
Run containers in your Kubernetes cluster. Your storage stays behind corporate firewalls without external egress.
Dedicated single-tenant cloud
We run an isolated instance for your company. No other customer shares database instances, memory, or compute.
Customer-managed keys
Plug in AWS KMS, Google Cloud KMS, or HashiCorp Vault. Revoke the key and every stored record locks.
Strict regional residency
Pin database storage, file attachments, and indexing jobs to data centres located in the EU, UK, US, or Gulf.
Air-gapped language models
Language models run on your own hardware or on an isolated cluster you provision, so the deployment calls no external AI service.
Custom channel engineering
Our team builds direct connectors for your internal protocols, legacy desk phones, or regional networks.
Where the security work stands
Technical controls run continuously and an outside firm is part way through our first SOC 2 Type II window. You get the control documentation that exists today before signing anything.
| Control | What you get | Where it is documented |
|---|---|---|
| SOC 2 Type II | An audit in progress across Security, Availability, and Confidentiality. | SOC 2 status letter |
| ISO 27001 | Planned. An information security management system built for certification later. | Control mapping |
| GDPR and privacy | Standard contractual clauses, data processing agreement, and direct deletion. | Data processing agreement |
| Data residency | Data pinned to selected regional infrastructure in the EU, UK, US, or Gulf. | Residency commitment |
| Encryption standards | TLS 1.3 encryption in transit and AES-256 encryption on all stored disks. | Security architecture doc |
| Key management | Bring your own keys using HashiCorp Vault or major cloud provider KMS. | BYOK deployment guide |
| SSO and provisioning | SAML 2.0 single sign-on with SCIM user provisioning and de-provisioning. | Identity provider guide |
| Immutable audit logs | Append-only logs of session, export, read, and message events. | SIEM export guide |
| Retention and legal hold | Preserve unaltered communication histories under mandatory retention rules. | Compliance archive guide |
| Penetration testing | Annual white-box assessments performed by independent penetration testers. | Latest pentest summary |
Standard documentation library
Download standard vendor evaluation files directly or request our raw audit packets for your compliance officers.
- SOC 2 Type II status letter
- ISO 27001 control mapping
- Standard penetration test summary
- Mutual data processing agreement
- Standard cloud SLA terms
- Architecture white paper
- CAIQ security questionnaire
- Disaster recovery plan
Four nines uptime with credits on Enterprise
We issue a ten percent credit on your monthly invoice for every thirty minutes of downtime below ninety-nine point ninety-nine percent, counted per covered service each calendar month. Measured availability and incident history are not published yet. The status page explains current coverage until monitoring is live.
Target availability99.99% monthly
Automatic penalty credit10% per 30 mins
Critical first response30 minutes
Assigned contactNamed staff engineer
Clear technical evaluations without chasing
We send the compliance pack and the security documentation that exists today. Your procurement team talks directly with our systems architects.
- Channel and network scoping
We inspect your channel inventory, message volumes, identity systems, and infrastructure parameters on a technical call.
- Security package delivery
We deliver our security policy set, the recent penetration test summary, a letter on where the SOC 2 audit stands, and a completed standard security questionnaire.
- Legal and residency review
Legal teams review the mutual DPA and service agreement while your infrastructure lead approves the hosting region and key management.
- Live production pilot
We deploy a cluster for one operational team using real production data instead of an empty test sandbox.
- Historical data migration
The importer reads the archive a network gives you, or the export from any of the 12 shared inbox tools we migrate from, straight into your indexed archive.
- Full roll-out and handover
A named systems engineer joins a shared channel with your administrators to run staff onboarding and verify audit feeds.
The rollout, stage by stage
Our engineering team provisions the cluster and verifies the first import. Your administrators take ownership at the last stage.
Talk to salesCluster provisioning and SSO
We spin up your isolated environment, configure SAML authentication, and connect the SCIM directory synchronisation.
Network and channel binding
Engineers link WhatsApp Business numbers, Telegram bots, Microsoft Teams, Slack, and corporate email domains.
Historical archive import
Migration pipelines parse legacy exports from older inboxes, indexing message attachments and conversation metadata.
Team rollout and pilot check
Front-line teams work the inbox on desktop and mobile while security reviews the retention output.
Company cutover and sign-off
Your staff switches to CommunicationOS. We transfer administrative ownership and verify the audit log feed.
Talk with our infrastructure team
Book a technical consultation with our engineering founders to review your network footprint, security compliance rules, and deployment requirements.