Access follows your organisation
Account roles and tenant-scoped database access help separate customer workspaces. Administrative actions require the relevant permissions. Keep individual accounts for your team rather than sharing a password.
Procora · Your business stays in control
Security, data and practical controls
Understand the setup and its limits before switching a service on.
Review the knowledge and the next action
The assistant uses your approved material and rules, but AI can make mistakes. Review important answers, prices and commitments. The quotation draft pilot does not send customer emails; additional sending capabilities require a separate, tested agreement.
Understand where data is processed
Procora uses hosting, AI, payment and communication providers. The relevant provider depends on the feature you enable. Ask us for the current processor list, hosting locations and processing agreement before sharing sensitive information; the location of our database alone does not describe every processing step.
Deletion and retention
Deletion requests and retention controls have different scopes. Backups, audit records and provider systems can have separate retention periods. Contact us to confirm the scope and timing of an erasure request; deleting a screen entry is not a promise of immediate removal from every system.
Prepare an appropriate knowledge base
Select information suitable for customer enquiries: approved service descriptions, public opening hours and agreed answers. Remove details unnecessary for the task. Patient records, payment details and confidential documents should not be copied into ordinary knowledge material. Workflows involving sensitive information need a separate assessment of the processing basis, agreements and technical setup.
Agree responsibilities before activation
Name the people approving information, maintaining access and reviewing errors. Agree which answers or actions need a staff member and how to pause the service. An audit of a public website can identify matters to investigate; it cannot certify business security or the lawfulness of internal processing. Use these questions as the starting point for a practical review with us.