Security Controls Across Every Layer of the Platform

Comm100 gives administrators the tools to enforce authentication policies, restrict access, encrypt data, and maintain a full audit trail across the entire platform.

Control Who Accesses Your Environment and How

Two-Factor Authentication (2FA)

Comm100 supports two-factor authentication for all agent and administrator accounts. When enabled, users must provide a second authentication factor in addition to their password before accessing the platform. 2FA significantly reduces the risk of unauthorized access from compromised credentials.

Single Sign-On (SSO)

Comm100 supports LDAP authentication and SAML-based single sign-on, allowing agents to log into the platform using the same credentials they use for other enterprise applications. SSO eliminates the need for separate Comm100-specific passwords, reduces login friction for agents, and centralizes credential management within your existing identity provider.

Visitor Single Sign-On

Visitor SSO authenticates customers before they start a chat, confirming their identity so agents can feel confident they’re communicating with a verified user. Visitor SSO also pulls account details into the agent console, enabling faster resolution and more personalized service.

IP Restriction

Administrators can restrict access to the Comm100 dashboard and agent console to specific IP addresses or IP ranges. This prevents logins from unauthorized locations and adds a network-level layer of access control on top of credential-based authentication.

Encryption and Data Handling Across Every Channel

TLS Encryption

All network communication between visitors, agents, and Comm100 servers is encrypted using Transport Layer Security (TLS). This applies to the chat widget, the agent console, API calls, and all integrated messaging channels. Encryption is enforced automatically and cannot be disabled.

Credit Card Masking

When credit card masking is enabled, card numbers sent through the chat window or through any connected messaging channel (including Facebook, Twitter, email, SMS, WhatsApp for Business, and WeChat) are automatically masked. Card numbers submitted through Comm100’s PCI-compliant secure form bypass the chat transcript entirely.

Secure File Upload

All files uploaded through Comm100 are automatically scanned for malware and suspicious content. If a file is flagged, the upload is cancelled before it reaches the agent or the system, protecting against malicious file-based attacks.

Track Every Action, Detect Every Change

Audit Logs

Comm100 maintains comprehensive audit logs that track all agent activity and all configuration changes made to the system. Audit logs record who did what, when they did it, and from where. This provides the accountability and traceability that compliance officers and auditors require during security reviews.

CAPTCHA Verification

Comm100 supports CAPTCHA verification as a required step before visitors can start a live chat, ensuring agents interact with real people rather than spam bots. CAPTCHA is also used to protect the login process after repeated failed authentication attempts.

Your Data Is Never Shared With Other Accounts

Comm100’s password policy controls let administrators set rules for password length, complexity requirements, expiration intervals, change frequency limits, and maximum failed login attempts before lockout. These controls apply separately to agent accounts and administrator accounts, giving security teams the flexibility to enforce stricter policies for higher-privilege users while maintaining appropriate requirements for standard agent accounts.

Password policies work alongside 2FA and SSO to create a layered authentication posture that meets the requirements of most enterprise security frameworks.

Full Controls Reference

Control	Category	Description
Two-factor authentication (2FA)	Authentication	Second factor required for agent/admin login
LDAP authentication	Authentication	SSO via Lightweight Directory Access Protocol
SAML single sign-on	Authentication	SSO via SAML identity providers
Visitor single sign-on	Access control	Pre-chat customer identity verification
IP restriction	Access control	Login restricted to specific IPs or IP ranges
Password policy	Access control	Configurable length, complexity, expiration, lockout
Role-based permissions	Access control	Granular user permissions by role
TLS encryption	Data protection	All network traffic encrypted in transit
Credit card masking	Data protection	Cardholder data masked across all channels
Secure file upload	Data protection	Automatic malware scanning on all uploads
PCI-compliant secure forms	Data protection	Sensitive data submitted outside chat transcript
Audit logs	Monitoring	Full record of agent actions and system changes
CAPTCHA verification	Monitoring	Bot prevention for chat initiation and login

Frequently Asked Questions

Does Comm100 support two-factor authentication?

Yes. Comm100 supports two-factor authentication (2FA) for all agent and administrator accounts. When enabled, users must verify their identity with a second factor in addition to their password before accessing the platform.

Does Comm100 support single sign-on (SSO)?

Yes. Comm100 supports LDAP authentication and SAML-based single sign-on. Agents can log into Comm100 using their existing enterprise credentials, centralizing credential management within the organization’s identity provider.

Can I restrict Comm100 access by IP address?

Yes. Administrators can restrict access to the Comm100 dashboard and agent console to specific IP addresses or IP ranges. This prevents logins from unauthorized networks or locations.

Does Comm100 encrypt data in transit?

Yes. All communication between visitors, agents, and Comm100 servers is encrypted using TLS. This applies to the chat widget, agent console, API connections, and all integrated messaging channels. Encryption is enforced automatically.

Does Comm100 provide audit logs?

Yes. Comm100 maintains comprehensive audit logs that track all agent activity, configuration changes, and system events. Logs record who performed each action, when it occurred, and the source IP address.

Does Comm100 support credit card masking?

Yes. When enabled, Comm100 automatically masks credit card numbers sent through the chat window or any connected messaging channel, including Facebook, email, SMS, WhatsApp, and WeChat. Card numbers submitted via secure forms bypass the chat transcript entirely under PCI DSS compliance.

Need Details for Your Security Questionnaire?

Contact our security team for specific documentation or download the security white paper.

Download Security White Paper