Security Features

1. Data Encryption

Encryption at rest

The database should encrypt all the activities and sensitive customer information. Expertflow CX does not possess any encryption mechanism for data at rest (on the database and storage level). We are currently in the process of developing a mechanism to encrypt and decrypt the data at rest for CX Cloud.

Encryption of data at rest (on the database and storage level) would be customer's responsibility for on-perm deployment. Customers can choose Percona or Mongo Enterprise from Atlas or any other provider.

Encryption in-transit

Encryption of data in transit can be configured by an SSL certificate implementation and enforcing HTTPS URL force redirection in CX user apps. Also, all the internal database connections are enforced with TLS (Transport Layer Security) connection.

2. Database Authentication

Every CX internal component’s MongoDB database connection is secured with password-based authentication.

3. Sensitive Data Masking

Secure Logging

At any log level, sensitive data such as customer or agent chat message body and customer PII such as customer’s first name, last name, username, phone number, and channel data are masked.