SECURITY & COMPLIANCE

Security review for governed AI messaging.

Verbum is built for teams that need AI-assisted messaging with human approval where required, traceability, privacy-aware workflows and documented security controls across business channels.

Request security packageView Trust Center

Public control overview

Technical and operational controls for governed AI messaging.

Controls are described here at a public level and apply where enabled, within the approved implementation scope. Implementation detail is shared through qualified security review.

Workflow security

  • Role-based access controls are designed to limit drafting, review, approval and administration to authorised workspace roles.
  • Least-privilege access is applied to workspace roles, operational access and approved integration onboarding where applicable.
  • Enabled workflow events can be recorded with available message, reviewer, rule, channel and timestamp context, subject to workspace configuration, plan capabilities and provider support.
  • Channel, API and integration credentials are handled through protected setup, scoping, rotation or revocation practices where applicable.

Data protection controls

  • Workspace-scoped access patterns are designed to keep tenant data separated across messages, contacts, credentials and audit records.
  • Browser and API connections are designed to use encrypted transport; protocol details can be reviewed during security evaluation.
  • Encryption at rest is documented where applicable for platform storage and reviewed through qualified security materials.
  • Verbum operates a documented incident response process for detection, containment and customer notification where applicable.
  • Retention and deletion are reviewed through workspace configuration, plan policy, provider configuration, DPA, order form or written agreement.

AI governance

  • AI context is designed to stay scoped to the active workspace conversation, configured policy context and selected channel metadata.
  • Verbum Automate can act only when configured policy and guardrails match the message context.

AI data handling

  • Customer operational data is not used for Verbum marketing.
  • Verbum does not use customer business messages to train public AI models unless explicitly stated and contractually allowed.
  • Customer message content is processed to provide configured AI-assisted drafting, routing, review and Verbum Automate workflows.
  • Customer message content is not used to train public or general-purpose AI models unless explicitly stated and contractually allowed.
  • Fine-tuning or training on customer message content requires explicit written authorization in the applicable agreement.
  • AI subprocessors may process prompts, message context and outputs only to provide the configured service, subject to applicable provider terms and approved customer configuration.
  • Retention of prompts, outputs and related workflow context follows the applicable workspace settings, plan terms, provider configuration, DPA, order form or written agreement.
See approval workflows

Qualified review materials

Security review and procurement support.

Security and privacy review materials are available through qualified review.

Request security packageView Trust Center

Materials available for review

  • Vendor questionnaires and RFP responses
  • Data Processing Overview review
  • Subprocessors review
  • Procurement documentation
  • Security and privacy review materials for qualified reviews
Legal CenterData Processing OverviewSubprocessorsPrivacySecurity Disclosure

Get started

Request a Starter trial or book a guided walkthrough.

Request Starter trialBook demo