Security & Privacy Architecture

At Chatty, security is not an afterthought — it is embedded into every layer of our distributed stack. Whether you use Chatty to automate customer support or index proprietary enterprise knowledge, your data is isolated, encrypted, and protected by defense-in-depth controls.

---

Security Pillars at a Glance

---

Outbound Network Defense: Anti-SSRF Engine

When a bot indexes a website or fetches a webhook URL, naive HTTP fetchers are vulnerable to Server-Side Request Forgery (SSRF), which attackers exploit to query cloud metadata services or internal microservices.

Chatty implements an Anti-SSRF IP Pinning Fetcher:

Prohibited Subnets

Any address falling within the following ranges is rejected immediately:

• 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 (RFC 1918 Private Networks)
• 127.0.0.0/8 (Localhost loopback)
• 169.254.169.254/32 (AWS, GCP, Azure Instance Metadata Services)
• ::1, fc00::/7, fe80::/10 (IPv6 loopback, unique local, and link-local)

Furthermore, the socket connection is pinned directly to the resolved IP address to defeat DNS rebinding attacks.

---

Authentication & Cryptography Standards

---

Frame & Cross-Origin Security

To protect your brand and prevent malicious third parties from hijacking your AI bot, Chatty enforces strict frame-ancestor rules:

1. Domain Allowlist: Every bot configuration includes an approved list of origins (e.g. yourcompany.com, app.yourcompany.com).
2. CSP Header Injection: When the widget loads inside an iframe, the backend verifies the parent origin and injects:

   Content-Security-Policy: frame-ancestors https://yourcompany.com https://app.yourcompany.com;

3. Unauthorized Embed Defense: If an unapproved domain attempts to frame your widget, browsers enforce the CSP policy and blank the iframe.

---

Resource Protection & DoS Ceilings

AI models and vector databases are computationally intensive. Chatty deploys multiple guardrails to guarantee 99.9% uptime:

• Streaming Upload Limit: Multimodal document and voice uploads are piped through a streaming chunk counter. If any upload exceeds 20MB, the stream terminates immediately.
• Distributed Redis Rate Limiting: Every public endpoint is protected by an Upstash Redis token bucket algorithm partitioned by client IP (for widget sessions) or API key.
• Strict Query Length: Inbound user prompt texts are capped at 4,000 characters. Null bytes, control characters, and recursive escape sequences are stripped before reaching the LLM tokenizer.

---

Compliance, Privacy & GDPR

Chatty empowers enterprise teams to meet global regulatory standards including GDPR, CCPA, and HIPAA privacy rules:

• Right to Access & Portability: Export all data associated with a bot, visitor session, or conversation thread via GET /api/admin/gdpr/export.
• Right to Erasure: Permanently purge an individual visitor's entire conversation and lead record using DELETE /api/v1/conversations/{session_id} or directly through the Live Inbox.
• Configurable Retention: Define automated data retention windows (e.g. 30, 60, or 90 days) to automatically drop historical chat logs.