Security
Security is built into MySA. Here is an overview of how we protect your account and your data.
Encryption
All traffic is encrypted in transit (TLS), and data — including call recordings — is encrypted at rest.
Access control
Role-based access controls (Owner, Admin, Creator, Viewer) gate every action, with separate Test and Live workspaces. Access to systems is least-privilege and audited.
Authentication
Passwords are hashed with Argon2id, sessions use rotating tokens with reuse detection, and two-factor authentication (TOTP) is available for your account.
Recordings & storage
Call recordings live in a private storage bucket and are only ever served through short-lived signed links — never publicly accessible.
Report a vulnerability
Found a security issue? We appreciate responsible disclosure — email security@mysmartassistant.ai and we will respond promptly.