Security and AI oversight.

The AI works inside limits your dealership sets, and your team sees everything it does.

• Your team turns AI on or off per channel and sets reply approval per agent. Webchat replies send within the safety rails.
• Every AI draft, every guardrail decision and every handover is visible in your workspace.
• A person can take over any conversation at any moment.
• AI messages disclose that they are from an AI, starting with the first message of a conversation. The disclosure cannot be removed.
• A rule-based screen checks every interaction without a model. A model-based review checks every email and WhatsApp draft before it is sent.
• Every AI action is written to an audit log your dealership can read. Records cannot be edited or deleted.
• A named person at Architera signs off every change to data, access or the AI before it ships.

Architera processes customer data for one purpose: running the platform for your dealership.

• Collected: contact details, vehicle interest and conversation content.
• Never collected: payment card numbers, bank details, health or biometric data. Payments run through your own provider; card data does not pass through the platform.
• Consent decides who may be contacted, per customer, channel and purpose.
• Your data is never used to train AI models, neither by Architera nor by our model providers, whose contracts prohibit it.
• Conversations reach a model only to do work for your dealership, over encrypted connections.
• On request, customer identities are replaced with placeholders before a model processes a conversation, and restored only inside Architera.
• Export returns everything held about a person; erasure removes it in one operation. At the end of a contract your data is exported to you and then deleted, on request.

Access depends on dealership membership and assigned roles.

• Isolation is enforced at the database layer on every query, independent of application code, and tested before every release.
• Access requires membership of the dealership or of a parent organisation with permission.
• Roles and permissions are managed by your dealership.
• Credentials that bypass isolation exist only on the server, held by authorised Architera personnel.

The platform runs on managed infrastructure in the European Union under continuous monitoring and a written incident procedure.

• Inbound WhatsApp and email messages are accepted only with a valid signature.
• Changes to access rules, safety controls, secrets and AI providers require approval before release.
• Monitoring runs around the clock and correlates failed sign-ins, denied access, rejected signatures and unusual export volume.
• High-severity findings alert Architera's security contacts immediately, day or night.
• A written incident procedure defines severity, containment, evidence and notification; customers are notified within the contractual window.

Architera builds on established providers for infrastructure, encryption, AI, messaging and payments. The named list is available to customers under contract.

Cloud infrastructure

Managed hosting supports the database, authentication, file storage and application.

AI providers

Architera selects models for each task.

Messaging and email

Providers connect WhatsApp and email to the dealership’s own accounts.

Payments

The dealership uses its own payment provider and remains the merchant of record.

Answers security reviewers ask first. For integrations and rollout, read the FAQ page.