Security & data
How Sona handles your customers' data — and why you stay in control of it.
Hosted in the EU
Sona's app and database run in the EU (DigitalOcean and Supabase).
Used only to answer tickets
A customer's data is used to draft replies to their own tickets — nothing else.
Not used to train AI models
Replies are drafted with OpenAI's API. Content sent to the API is not used to train OpenAI's models.
You stay in control
Nothing reaches a customer without your approval, until you turn on autopilot per ticket type.
Scoped integrations
Sona connects to your store and inbox with the access it needs to do the job, and no more.
Sub-processors
The services that help us run Sona and process data on our behalf.
To draft replies, ticket content is sent to OpenAI's API (United States). OpenAI does not use data submitted through its API to train its models.
We're working toward formal certifications. Have specific compliance requirements? Talk to us.
Book a demo