Data isolation
Every workspace is isolated at the database level, so one customer can never read another's demos, screens or leads. Product screenshots live in private storage and visitors only get short-lived links to screens in a published demo.
Security and trust
Built so enterprises can put a live AI presenter in front of buyers without risking their data.
Redaction you control
Hidden fields are burned into a new image before publishing, so masked data never reaches a visitor's browser.
Encryption
All traffic uses TLS. Data is encrypted at rest with AES-256.
AI guardrails
The presenter only answers from your approved knowledge, resists prompt injection, and never exposes lead data to visitors or AI agents.
Compliance roadmap
We follow SOC 2 controls today and are working toward a SOC 2 Type II audit. GDPR rights are honoured for every visitor.
Report a vulnerability
Email hello@bocy.io. We acknowledge reports within 2 business days and never take action against good-faith research.