Controlled access
Role-based permissions limit access to customer conversations to the teammates who need it.
Text encrypts every chat, only lets in the teammates you invite, and stores data in US and EU data centers.
No credit card requiredFree 14-day trial
Text is intuitive live chat software from the team behind LiveChat.com, HelpDesk.com, and ChatBot.com, products used by 30,000+ customers worldwide.
An independent auditor tested Text’s controls for SOC 2 Type 2. Request the full report, plus the latest penetration test, in the Text Trust Center.
SOC2
PCI DSS – SAQ A
Control access to customer conversations and keep each account’s data separate.
Role-based permissions limit access to customer conversations to the teammates who need it.
Cloudflare and Akamai filter incoming traffic and stop attacks like DDoS before they reach Text.
No other account can reach your data, and an Owner or Admin can ask Text to delete any chat or ticket.
Card payments run through PCI DSS–certified providers built to protect card data.
Text’s application infrastructure runs on Google Cloud in the US and the EU. Uploaded files are stored separately in Amazon S3. Both providers undergo SOC 2 audits and hold ISO 27001 certifications.
Start free trialTexas and Iowa
These locations refer to Google Cloud application infrastructure. File storage uses Amazon S3; check the Text Trust Center for the current storage locations and subprocessors.
Frankfurt, Germany
The GDPR covers data processed in the EU, and Text takes part in the EU-U.S. Data Privacy Framework. See the list of subprocessors.
Only teammates you invite get in, each as an Owner, Admin, or Member.
Members chat with customers and work on tickets, but they can’t open billing or subscriptions.
Chatting teams take live chats and ticketing teams take tickets, so each request reaches the right people.
The Teammates list shows each person’s two-factor status, so you know who still needs to turn it on.
On the Enterprise plan, audit logs show who changed what in your account, and when.
Ban a disruptive visitor and pick how long it lasts. They stop seeing your chat widget and drop out of Real-time customers. For email, add senders to your Blocked list to send their tickets to spam.
Two-factor login comes with every plan, and Enterprise adds single sign-on.
Your team signs in with the Google, Apple, or Microsoft account they already use at work. It’s on every plan.
Your team enters a one-time code from an authenticator app after the password. Admins can require it for everyone.
Your team signs in once through your identity provider, such as Okta or any other SAML 2.0 provider. Custom SSO comes with the Enterprise plan.
See the Enterprise planNo. Text is a new product from the team behind LiveChat, and this page describes Text. Your LiveChat account, plan, and security settings stay exactly as they are, and you keep logging in here. If you want to try Text alongside LiveChat, start a free trial and run both while you decide.
Text uses a cloud infrastructure model, so our staff has no physical access to servers. Access to customer data is limited to authorized personnel who need it for their work, and it is governed by confidentiality agreements, role-based access control, and documented security policies. Customer data is logically separated so one account cannot reach another’s data.
All connections to Text services are encrypted with 256-bit TLS (versions 1.2 and 1.3). This covers agents in the web, desktop, and mobile apps as well as customers using the chat widget on your website. Traffic is routed through a content delivery network with DDoS protection and a web application firewall.
Text’s application infrastructure runs on Google Cloud Platform in the United States (Texas, Iowa) and the European Union (Frankfurt, Germany). Uploaded files are stored separately in Amazon S3, Amazon Web Services’ object storage service. The Google Cloud locations describe application infrastructure, not file storage. Both providers undergo SOC 2 audits and hold ISO 27001 certifications. The current list of subprocessors and their locations is published in the Text Trust Center.
Yes. An independent auditor completed a SOC 2 Type 2 audit of Text in 2026. The attestation letter is public, and the full report, the penetration test report, and the accessibility conformance report for the chat widget are available on request through the Trust Center, subject to a standard confidentiality agreement.
Every plan includes login with Google, Apple, or Microsoft and two-factor authentication. The Teammates list shows who has two-factor turned on. Custom single sign-on with your identity provider and audit logs are part of the Enterprise plan. See Text pricing for the full comparison.
You can request your stored chat history or personal data at any time by emailing support@text.com from the address associated with your Text subscription. Data is provided within 30 days. Deletion requests for customer data follow the same path and our documented data retention procedures. Details are in the data security FAQ.
Add *.text.com, *.static-text.com, *.files-text.com, *.livechat.com, *.livechatinc.com, *.livechat-static.com, *.livechat-files.com, cdn.livechatinc.com, and *.recurly.com to your firewall exceptions. For webhooks, whitelist 185.177.172.0/22. Because the CDN and anti-DDoS layer use thousands of edge servers, filter by domain rather than IP.
No, your LiveChat plan stays the same. The features and capabilities on this page are part of Text and are available under Text pricing plans. They are not included in LiveChat plans, including legacy LiveChat subscriptions. Availability, limits, and pricing depend on your Text plan. If you’re on a LiveChat plan and want these features, you can move to Text.