Security

Tenant & workspace isolation

Multi-tenant by design at the database and vector store level. Workspaces control which knowledge, apps, and tools each experience can use.

Signed SDK connections

External SDK Connections use a signed /qefro protocol. Credentials stay in your backend; Qefro orchestrates tool calls.

End-user identity forwarding

Forward signed-in identity via identify() so tools run as the real user — passwords never touch Qefro.

Audit & execution logs

Conversation history and tool runs stay attached for accountability and review.

RBAC & controlled tools

Owner / Admin / Member roles, workspace-scoped secrets, and per-tool allowlists for public channels.

On-prem capable External SDK

Run sensitive connectors in your infrastructure. HTTPS-only outbound calls with SSRF protections and DNS-pinned webhooks.

Enterprise platform controls

Your systems remain yours. Qefro adds the AI application layer with governance — not a black-box takeover of your ERP or CRM.

Access control

Owner / Admin / Member RBAC
Email OTP — no password storage
Billing actions restricted to owners
Workspace-scoped documents & tools

Data handling

PII scrubbing on outbound LLM calls
Never used to train AI models
Encrypted at rest & in transit
Conversation isolation

Tool execution

OpenAPI schema validation
SSRF & DNS pinning for webhooks
Per-tool public-chat allow toggles
Execution logs for accountability

Enterprise roadmap

SSO / SAML (roadmap)
Platform admin audit trail (roadmap)
Private deployment available today
SOC 2 program in progress

Compliance & deployment

Enterprise customers can run Qefro in a private environment with dedicated support. Contact Sales for the current compliance roadmap and data processing terms — we do not invent certifications we have not completed.

Keep your ERP. Add Qefro.

Build the AI layer for your business.

Connect the software you already use to AI-powered customer conversations, CRM, and automation — start a 14-day free trial, no credit card required.

Get Started Talk to Sales Explore the SDK

Talk to Sales for Enterprise · Documentation · Security overview