Security & privacy
How we handle your information.
You're trusting us with your chatbot and your business information. Here is exactly how we handle both, in plain English.
In short
- We only talk to your bot, never your customers
- We only test with the owner's permission
- We don't need your customers' data
- Your results are shared only with you
- We'll delete them whenever you ask
Questions? Email hello@cendolabs.com.
- 01
We only ever talk to your chatbot
Our AI tester holds conversations with your chatbot, playing made-up customers. We never contact, message or impersonate your real customers.
We only test a chatbot with the written permission of the business that owns it, or the agency that built it for them.
- 02
What we ask you for
A link to your chatbot, and your real prices, policies, services and handoff details, so we can check your bot's answers against them. This is business information, not customer data.
We don't need any of your customers' personal data. Please don't send it to us. If your chatbot has access to real customer records, tell us before testing so we can agree how to handle anything it reveals.
- 03
How test conversations are processed
Our AI tester and AI reviewer run on Claude, made by Anthropic, through Anthropic's commercial API. The test conversations and your business facts are sent to Anthropic to generate the tester's messages and to grade your chatbot's answers.
By default, Anthropic does not use inputs or outputs from its commercial API to train its models.
Anthropic: Is my data used for model training? - 04
Who sees your results
Your report and test conversations are kept privately by Cendo Labs and shared only with you, or with the agency that engaged us on your behalf.
We keep your results so we can show what improved between tests. Ask us at any time and we'll delete them.
- 05
If you give us access to your chatbot platform
You only need to if you'd like us to apply fixes for you. We'll use the access only for the agreed work, and you can remove it whenever you like. Where your platform allows it, give us our own login rather than sharing yours.
- 06
If we find something serious
If a test shows your chatbot exposing personal data or something similarly serious, we'll tell you straight away rather than waiting for the report.
- 07
What we don't claim
We're a new company and don't currently hold security certifications such as ISO 27001 or SOC 2. If your organisation needs specific contractual or data-protection terms, ask us before we start and we'll tell you honestly whether we can meet them.