Encryption and hosting
Product traffic uses TLS 1.2 or later. Stored customer content is encrypted at rest with AES-256. Primary data and backups are hosted in the United States. EU hosting, customer-selected regions, and on-premises deployment are not offered.
Access and identity
All plans support optional authenticator-app two-factor authentication. Scale adds SAML SSO, custom roles, and a 365-day audit log. Standard roles separate billing ownership, administration, and agent access. Support access to customer workspaces requires owner authorisation.
Assurance and limitations
RelayDesk is not SOC 2 certified, ISO 27001 certified, or HIPAA compliant. It does not offer a Business Associate Agreement. Do not use the service to store protected health information or payment card data. No public uptime SLA or financial service credits are offered.
Retention and security reports
After a paid term ends, workspace data is retained for 30 days before deletion from active systems; backups may retain deleted data for up to 35 additional days. Report suspected vulnerabilities to security@relaydesk.example. This is a fictional address and cannot receive reports; all commitments here are test content.