Trust center

Understand how HelpoSoft handles identity, customer data and service reliability.

A transparent overview of built-in controls and the responsibilities that remain with the organization operating the application.

Identity and access

TOTP MFA and recovery codesOpenID Connect SSO with PKCECustom roles and least-privilege permissionsActive session and trusted-device revocation

Tenant and data controls

Workspace-scoped application queriesHashed API tokens and encrypted provider secretsPrivate attachments and signed downloadsRetention, export and anonymization workflows

Application protection

CSRF validation and prepared database statementsRate limiting and idempotency controlsSigned provider webhooks and callback validationPublic-HTTPS-only outbound integration URLs

Operations and evidence

Tamper-evident security event chainQueue, migration and system health monitoringDatabase backups and recovery toolingStatus pages, incidents and HTTPS monitors

Data lifecycle

Control support information from collection through deletion.

Collect customer messages through approved websites, email channels, APIs and messaging providers.

Store workspace-scoped tickets, conversations, contacts and private attachments.

Apply role, session and integration permissions to access.

Export customer data and configure retention or anonymization.

Back up, monitor and retire data according to your operating policy.

Deployment checklist

Controls to verify before production.

HTTPS on every public endpointDedicated database credentialsProtected application keyQueue and scheduler monitoringTested backups and restorationMFA for administratorsLeast-privilege rolesRetention and privacy policy