Workspace isolation
Relay applies a workspace identifier to organization-owned records and checks that boundary on authenticated requests. This keeps one workspace from reading or changing another workspace’s people, requests, and knowledge.
Role-based access
Relay uses three explicit roles: employee, resolver, and administrator. Employees can see their own requests and approved knowledge. Resolver queue access can be limited by department. Administrators manage the directory, configuration, and access rules.
Confidential complaints
Complaint requests can be marked confidential. Those complaints remain visible to the requester and to administrators who have confidential access and are permitted to handle the request; they do not appear in general employee or resolver views.
Session security
Relay uses authenticated sessions and automatic inactivity timeouts to reduce exposure on unattended devices. The default timeout is 10 minutes and users can choose from the available session-duration settings.
Operational history
Relay records important request and access changes, including role and department-access updates. These records support operational review and accountability; they do not replace your organization’s own compliance or monitoring program.
Hosting and transmission
Relay is served over HTTPS in supported environments and uses managed infrastructure for application hosting, authentication, and database access. We do not claim a security certification that has not been independently completed.
Reporting security issues
If you believe you have discovered a security vulnerability in ContiHQ Relay, please report it to relay@contihq.com. Include enough detail for us to reproduce the issue, but do not include unnecessary personal or confidential information.