Security built into
the working day.
Access controls, reviewable actions, and operational safeguards for the information your IT team handles.
Sign-in and permissions
Password-based application sign-in requires an authenticator. Company SAML single sign-on follows the identity provider’s MFA policy.
Company membership, roles, and ticket access checks control who can view and act on records. Directory synchronization and application discovery are separate from granting sign-in access.
Company data boundaries
Application requests are checked against company membership and permissions. Database policies and server-side checks enforce company scope; a link to a record does not itself grant access.
Permission and integration testing remain part of pilot acceptance and release review.
Attachment handling
File intake uses quarantine and a private malware-scanning worker. Scanning state is used to control file availability, with monitoring for worker outages, stale signatures, and stuck files.
Malware scanning reduces risk but cannot guarantee a file is harmless. End-to-end validation across all upload paths is part of launch readiness.
AI with human review
AI assistance is enabled by a company administrator. Generation requires access to the ticket and the relevant action permissions. Technicians review suggestions before sending replies or applying changes.
Read what AI processes and how limits work.Monitoring and recovery
Health monitoring and alerts support the hosted scanning service. Recovery rehearsal, data lifecycle procedures, and remaining customer acceptance checks are tracked as release gates.
This page does not represent a security certification, contractual uptime commitment, or completed independent audit.
Security questions?
Contact sales@keylello.com to arrange a security discussion. For a suspected vulnerability, send a brief description and ask for a secure exchange channel before sharing sensitive details.