Security
Control who sees your data and what AI can do
Decide what each teammate can reach, where your chat widget loads, and which actions the AI agent may take without a person.
Try Sudeem free for 14 days. You won’t be charged before the trial ends, and you can cancel anytime.
Your team
Give each teammate only the access they need
Two-step sign-in
Each teammate can turn on two-factor authentication with an authenticator app and recovery codes.
Roles and permissions
Give each teammate the owner, admin, or member role, or create a role with only the permissions it needs.
Internal notes
Notes and mentions inside a conversation stay with your team and never reach the customer.
Your website
Load the chat widget only on your own sites
List the domains that can load the Sudeem SDK, and every other site is refused.
- Identity verificationYour server signs each signed-in customer’s identity, so the widget shows each customer only their own tickets.
- Keys you can replaceReplace the install key or the identity secret at any time if one leaks.

AI controls
AI that asks before it acts
The AI agent answers from the sources you add and runs only the actions you allow.
Approval before it acts
Mark an action as needing approval, and it runs only after a person approves it.
A log of every call
Each time the agent runs an action, the request and the result are recorded.
AI tools sign in first
Claude, Cursor, and other MCP clients reach your workspace only after you sign in and approve access, and every call is logged.
Limits on use
Daily limits on MCP calls and limits on message rates protect your workspace from misuse.
Your data
Your workspace’s data stays in your workspace
Encrypted app credentials
The tokens and keys of the apps you connect are stored encrypted, and each agent uses only the apps you grant it.
Separate workspaces
Every request, including those from AI tools, is limited to one workspace and cannot reach another.
Before you begin
Questions before you start
Who on my team can see conversations?
Each teammate sees what their role allows. You decide which permissions every role has, and only the owner has them all.
Can I stop other sites from loading my chat widget?
Yes. List your domains in the SDK settings, and Sudeem refuses to load the widget, surveys, or banners anywhere else.
Can the AI agent change data in my systems on its own?
It runs only the actions you add, and you can require a person’s approval before an action runs.
How do I delete my data?
The data deletion page explains how to delete your data from your dashboard, or ask us to delete it.
Set up your workspace with the access you choose
Create your account, invite your team with the right roles, and turn on two-step sign-in.
Try Sudeem free for 14 days. You won’t be charged before the trial ends, and you can cancel anytime.