# Security and your customers' data

> How Tirver keeps conversations separate, who can see what, and the controls you hold.

Support conversations hold your customers' words and sometimes their personal details. This article explains the controls that protect them and the ones you manage.

## Your workspace is separate

Everything you create, such as conversations, customers, articles, ideas and settings, belongs to your workspace. Teammates see it only when they are members, and each request in the app is checked against the workspace it belongs to.

## Control who gets in

- **Roles.** Owners, admins and agents have different access. Agents never see settings or billing. See [team roles](https://tirver.com/help/team-roles.md).
- **Invitations.** People join only by invitation to their own email address.
- **Passwords.** Accounts use a password of at least 8 characters.

## Control the widget

- **Identity verification.** Sign the customer id on your server so nobody can read another customer's conversations. See [identify signed-in customers](https://tirver.com/help/identify-signed-in-customers.md).
- **Allowed domains.** Limit the widget to your own sites. See [allowed domains](https://tirver.com/help/allowed-domains.md).
- **Your secret stays yours.** The identity secret is shown once and stored so that it cannot be read back. Rotate it if it leaks.

## What the AI agent can see

The agent answers from the knowledge sources you add, and from the conversation it is in. It does not browse the wider internet, and it only discusses topics you allow. You can stop it using a source at any time by deleting the source. See [how the AI agent answers](https://tirver.com/help/how-the-ai-agent-answers.md).

## Developer access

API keys, which also work for the MCP server, are secrets. Treat them like passwords, give each one only the scopes it needs, set an expiry where you can, and revoke any you no longer use under **Settings, API keys**. See the [API docs](https://tirver.com/help/api.md) and the [MCP docs](https://tirver.com/help/mcp.md).

## Questions about privacy or a security issue

Write to [security@tirver.com](mailto:security@tirver.com) for security reports, or [hello@tirver.com](mailto:hello@tirver.com) for anything else.

Source: https://tirver.com/help/security-and-data-privacy