Security & privacy
Login and email verification
Sign in to INSIDE with your operator account and verify your email address when your website requires it.
Password changes and recovery
Change your INSIDE password or recover access through an emailed reset link, with optional password history and expiry.
Two-factor authentication for operator sign-in
Add an authenticator-app or email code to password sign-in and complete mandatory setup when your website requires it.
Logout and remembered computers
Understand how INSIDE keeps you signed in, remembers factor verification and ends an operator session.
Single sign-on with SAML 2.0
Sign in to INSIDE through your organisation's SAML identity provider using website-specific single sign-on settings.
Single sign-on with OAuth 2.0
Use your website's OAuth 2.0 provider to identify an operator and enter INSIDE through single sign-on.
SSO operator creation and activation
Create missing single sign-on operator accounts from a website template and notify the contact responsible for activation.
Operator access tokens
Expiring operator credentials support remembered second-factor checks and password-based API access.
My API Keys and access restrictions
Integration credentials and tokens limit API access by permitted operations and IP address.
Email verification for protected exports
Email verification checks the requesting operator before protected history, report and personal-data exports.
Personal data export
Export and download a contact's or visitor's linked personal data as an Excel workbook for review and disclosure.
Customer identity and conversation visibility permissions
An operator permission controls whether customer identity and other operators' conversation content appear in full.
Credit card masking
Replace detected card numbers in conversation text and subjects with stars, with optional last-four-digit display.
Customer data deletion and recovery
Delete selected customer information from normal views while retaining a copy that can be recovered through Audit.
Permanent deletion of retained customer data
Permanently remove a retained deletion copy and the associated stored resources identified for cleanup.
Personal data retention and automatic deletion
Automatically remove aged personal information using a website retention period and message-handling rule.
Captured data expiry and message sanitisation
Clear captured field values at conversation or session end and optionally sanitise personal information in visitor messages.
Visitor IP address anonymisation
Reduce the precision of visitor IP addresses when INSIDE saves visitor records.
Website domain checks for browser requests
Apply website domain checks to selected browser requests used by embedded chat and the operator console.
Sign-in and chat request limits
Limit repeated sign-in attempts, verification-code requests and selected rapid chat actions.
Certificates and protected browser data
Powerfront manages the certificates and protection material used for secure connections and remembered browser verification.
Operator sign-in network and email restrictions
Restrict operator sign-in networks and the email domains permitted for operator accounts.