Security
Your data is your company's most valuable asset. Here's how we protect it.
Mavox AI isn't designed on the assumption that nobody will ever make a mistake. It's designed so that a mistake or an unauthorized access is contained, recorded and reversible.
Your data, isolated and yours
Every company and every location, in its own space.
No query crosses from one to another: your company's identity travels with every request and can't be changed from the browser. In a group of companies, one legal entity can't see another unless you enable it.
Every area, with its own database.
Sales, payroll, accounting and treasury don't share storage. If something fails in one part, it doesn't spread to the rest.
Nobody at Mavox has an account inside your company.
Your platform is run by you and the team you authorize. For support there is a reserved technical access, limited to a small team, used only when you ask for it, and every use is logged with name and time. There is no way to look at your operation without leaving a trace.
You decide who does what
Permissions action by action, location by location.
You decide who can view, who can create, who can approve and at which location, for every module.
When someone leaves, their access is revoked on the spot.
They can't get back in by any route, and a session they already had open expires in less than an hour. Everything is logged.
Dual approval wherever money moves.
For supplier payments you can require two people: whoever builds the batch is not the one who approves it. It's set per company and per amount, always or above the threshold you choose.
Everything leaves a trail.
Who approved a payment, who changed a price, who edited a payroll: it's recorded with author and time, and the log can't be edited from the application.
The AI works by your rules
Agents only do what you enable.
They're configured company by company; anything outside your rules isn't executed, even if someone asks for it, and goes to a person instead.
What it learns from your company stays in your company.
No AI model is trained on your data, neither ours nor the providers': we use their commercial APIs, where not using your data for training is the default. What does happen is this: when your accountant corrects how an invoice was booked, Mavox applies that correction next time for that supplier, in your company. It never crosses over to another client, and that's written into the contract.
Your team approves before letting it go.
Your team approves the first five invoices from every new supplier; after that they go through on their own. Anything that doesn't match the purchase order goes back to a person. And every agent action is logged: what it did, when, and who approved it.
Don't take our word for it: check it yourself.
You can plug in your own AI provider key. Your conversations go through your account, under your contract, and you see exactly how much you use.
How it's built
A single front door.
All platform traffic comes in through a single point that authenticates, filters and rate-limits it before letting it through. We're closing the remaining exceptions left over from older modules.
No secrets in the code.
Services identify themselves with cloud-managed identities, and credentials live in an encrypted vault that only releases them at runtime. Having the code doesn't mean having the keys.
Testing and production, kept apart.
Separate servers, databases and credentials, with an automated check before every deployment. What we test never touches your data.
Nobody edits your database by hand.
Every schema change is written down, reviewed and versioned, applied on deployment and reversible.
No change reaches production without being logged.
Every deployment is recorded with its date and who launched it, and critical services also require explicit approval. If a new version doesn't come up cleanly, the previous one keeps serving.
Encryption, backups and where your data lives
Encrypted in transit and at rest.
All communication travels encrypted and every database is stored encrypted, using current industry standards.
Continuous, automatic backups.
You can restore your data to any point in the last 7 days, and copies are replicated to a second region. They don't depend on anyone remembering to run them.
Built on Microsoft Azure, with your data hosted in the United States.
Physical and infrastructure security is handled by Microsoft, under its international certifications.
Found a security issue?
Write to us at contacto@mavox.ai
Does your IT team want to review the technical details?
We'll set up a session with our technology team.