Security
Built to keep your company's conversations private
Security isn't a feature we bolted on. Here's how Basik protects your data, in plain language — and what we're still working on.
How we protect your data
Encrypted in transit
Every connection to Basik — apps, browser and API — uses TLS. Call media is encrypted by WebRTC (DTLS-SRTP).
Encrypted at rest
Messages, files, names, email addresses and other personal details are encrypted with AES-256-GCM before they're stored, in the database and on disk.
Keys in AWS KMS
Data keys are wrapped by a master key held in AWS Key Management Service, so a copy of the database alone can't be read.
Strong sign-in
Passwords are hashed with Argon2id, email ownership is verified with one-time codes, and repeated failed sign-ins are locked out.
Staff can't browse your content
Our internal admin console shows account, usage and billing metadata only — never messages, files or calls. Staff sign in with two-step verification and every action is logged.
Calls on our own infrastructure
Voice, video and screen sharing run on media servers we operate, not a third-party meeting service. Background blur runs on your device.
AI on your terms
Basik AI uses your company's own provider key, stays off until an admin enables it, and we don't train models on your data.
Audit trails
Administrative and channel actions are recorded in an audit trail — without message content — so changes can be traced.
Signed file links
Files are served through short-lived signed links, checked against who can see the conversation they belong to.
Your controls
- Roles. Owners and admins manage members, modules (like the Workboard) and AI settings. Channel admins manage their channels.
- Private channels. Only members can see a private channel and its files; search only returns what you're allowed to see.
- Sessions. Signing out ends the session, and resetting your password signs you out on every device.
- Data requests. Contact us to export or delete your company's data. See our Privacy Policy.
Compliance and reviews
Where we are
We're a young company and we haven't completed a third-party certification like SOC 2 yet. We're happy to answer security questionnaires, walk your team through our controls and sign a data processing agreement.
Responsible disclosure
Found a vulnerability? Email security@thebasikcompany.com with the details. Please give us reasonable time to fix it before sharing it publicly. We won't pursue good-faith research that respects our users' privacy.
Questions about security?
Our team will walk you through how Basik protects your data.