Skip to content

Know what you’re
trusting your work to.

How Tamaam handles access, Help requests and AI-assisted work, and what is still being built.

Report a security concern
Where we are today

Tamaam is in development and accepting early-access interest. This page describes scoped controls, not an independent security audit. We are not claiming SOC 2 or ISO certification, a published uptime commitment, or guaranteed data residency. Single sign-on and audit logs on the Pricing page are planned capabilities.

Authenticated services

Access starts with your account.

Available authenticated services check account access. Private Help queues are restricted to platform administrators. Workspace membership and permissions determine access in connected workspace services.

Product previews can use sample or session data. A screen demonstrating a workflow is not a guarantee that it is connected to live storage.

Help and support

A support request stays private.

Feedback, unanswered searches and support requests are stored in private database records. Authorised administrators can review submissions, set status and priority, and record internal notes and a history of changes.

Requests are saved before an email notification is attempted. Closing or archiving a ticket does not delete it. Help intake validates submissions and limits repeated requests.

Nefer and external services

AI work deserves a human review.

Where a live AI feature is enabled, prompts and relevant context can be processed by an AI provider. Review answers and prepared content before using them, especially when they affect a client, payment or business decision.

Some Nefer workflows are demonstrations of planned features. We do not claim that all AI actions are live, or make a blanket promise about provider training or retention.

Providers and analytics

Understand where information goes.

Tamaam uses service providers for hosting, account access, database storage, email, analytics, error monitoring and enabled AI features. The Privacy page explains these functions and the information involved.

Inputs are masked in analytics, and the private Help admin queues exclude automatic interaction capture and are masked for replay. This is not a claim that analytics is disabled across every page.

Read about data handling

Found something
we should look at?

Send a security report to hi@tamaam.io. Use “Security report” in the subject so the team can identify it.

Email the team

A useful report includes

  • The affected page or feature
  • Steps to reproduce the issue
  • The impact you observed
  • Redacted screenshots or other relevant evidence

Please leave out passwords, access tokens and other people’s private information. This contact route is not a bug bounty programme and does not promise a response time.

Need product help instead?