Security & Compliance

How do I find my API secret?

We implement the user_hash to verify identity, but how are other variables verified? For example, a user might add or alter the "name" property of the window.intercomSettings object, or the information in the company object, even adding itself to other companies? Also, one might think to use Intercom REST API to securly add this information on user_id in a controlled manner, but then still the same question applies, how is adding/altering information via frontend prevented?

I'd like to know what backup security there is from Intercom side. If say for example our users were to be deleted by accident. Would this information be stored or backed up on your end and how does this work exactly? Thanks

Please tell me. There is a custom script:We open the tab from User # 1, write in support - we answer himOpen the second tab, exit in it and go under user number 2In the intercom we write something to user # 1We go to the first tab, where we have a window with user number 1 - messages that we sent from the intercom camehow to delete a session?

How do I set my Default sender address to be change to 'Use teammate's Intercom account email address'?

As an admin, how do I change or update the email address of a teammate?

Hello! Our team has a developer workspace and we are unable to add new teammates due to an error.  Regardless of whether an inbox seat is assigned or not and which permissions are set, when trying to send invites to the new team member(s), an error message appears: “Cannot convert undefined or null to object”. We have tried different combinations of permissions and having an inbox seat, but the error persists. The invites are not sent and we are stuck on the “Set permissions” screen.  We have also tried creating a new developer workspace and the same error occurs when trying to add the new teammate(s).  There is a corresponding error log in the browser console: /ember/inbox/pricing_migration/migration_states/wmvkgtzf?app_id=wmvkgtzf:1 Failed to load resource: the server responded with a status of 404 () Any help or insights would be appreciated, thanks in advance!

I authenticated the intercom CNAME record but not the outbound CNAME record. They both use the same domain administrator.I also confirmed with my domain provider which is Moniker that is set in a right way. Also, I have waited for the propagation! Help!

For authenticating my domain, I have successfully authenticated the intercom domain key CNAME but not the outbound intercom CNAME. They both use the same exact process and were set up the same exact way. Anyway, one fails while the other is working.

I've just inherited an Intercom instance with pretty robust rules and bots set up. I would love to run some tests on some things in a test environment but do not want to take the time to rebuild everything from production. Can I refresh the test environment to match production? Am okay with losing everything that is currently in Test.

Hello, to help filter messages from users we would like to know if there is a way to block personal email addresses (gmail, hotmall, yahoo, etc.) so if the person does not send a business email they will be sent to spam or be sent a bot message to provide a valid email. Thanks!

Hi, we are launching our new Saas solution in the coming days... One of it's features is Workspaces. As a user, you can create different workspaces, just like in Slack, where you could have one workspace related to company A and another workspace for all things related company B.  Now, since our Saas app is security related, for security reasons, each time that one of our customers creates a new workspace it automatically creates a new subdomain for them with the name of their workspace. And they will only be able to access the app (and their workspace) with that subdomain!! So, to give you an example, if you would become our customer and you would create a new workspace called "companyA", we will automatically create a new subdomain for your workspace called:https://companya.ournewsaas.com. (where ournewsaas is the name of our upcoming SaaS, and companyA is the name you gave to your new workspace.)Now comes the question: If - like i explained above - we are going to cr

Why I and my team are not getting notification when a customer comes on live chat? We have all the notification settings ticked under My account > Notifications. We generally look at slack channel to see who came on chat and then view on intercom.

Is there a way to remove our last name from our personal Intercom email address (john.smith@guidestar.intercom-mail.com) or to change it so when we respond to users from our individual email address the users see it coming from our team email address (support@candid.org)?Thanks for any help! 

Currently, our teammates find they must re-set up certain areas of the Intercom whenever they use Intercom (this may be related to their seats being turned off and on each time). This is annoying for them because they need to reconfigure certain parts of the right-hand sidebar, like toggling the "Latest Conversations" box to display, and setting up the Customer Details box to display relevant fields. Is there a way to create a "Default View" so they don't need to reconfigure it every time?

We have 2 pre-prod environments, so we would need 2 test workspaces to match

I have 6 support agents. They all use the same email platform (Google for Business). I sent new teammate invites to all 6 of them through Intercom. Three of my agents received the email and were able to get into the system. Three did not receive the invite. I've revoked and resent the invite countless times. I've verified that in "All Mail" there are zero emails showing up from Intercom. I even have the Google authentication set up and working with Intercom and that didn't fix the issue either. It's the strangest thing. We do not have any spam filtering or other anti-malware protection in place besides the standard GSuite protections and standard Microsoft Windows security. I reached out for help from Intercom Support last week and still haven't received a response. Is this company run by bots? HA! :)

Is Intercom HIPAA compliant?

We are a HIPAA compliant company and so do not want to use the JS provided by intercom due to the security risk. Does anyone know of a way to implement the service without using JS that calls every time?

Hey there! I tried to invite people to my workspace and it says; "We've prevented your workspace from sending email, including invites, as your workspace failed our workspace review process. Please contact customer support or visit our Help Center for more information.". However, I didn't send any emails nor do anything that broke the terms? I even reviewed the Help Center page and it didn't really help with what to do if denied. I've reached out to Intercom Support 6 hours ago, and I'm still awaiting a reply; I completely understand that it takes at least 2 days for them to reply. Yet, I'm still stumbled on how we failed the process?

Our company is situated in Germany and has to comply with german data protection law. We are looking for a way to give the client a) notice about data collection through intercom and b) the possibility to opt in/out to that.  How do you deal with that topic? Which solutions maybe come out of the box from intercom?  Thanks for any thoughts on that!

Hi there, in the following page : https://www.intercom.com/help/en/articles/3894-using-intercom-with-content-security-policy this link seems not to be reachable : https://share.intercom.io.Please, is anyone know what the correct link is for our proxy ?

What ever we try a new problem rises. I think we do not have a proper understanding of intercom even-though we use it for about half a year. It's time an expert joins us to advise us. Of course we will come up for the help financially. please drop a msg and let me know if YOU are interested.

Hello! I'm new to this forum, love it! I was wondering what the main purpose for the different workspaces is? Maybe if you guys could provide some examples as to how or why you've used different workspaces. I've got my main workspace pretty much all setup and running, but just wondering as I don't wanna miss out on any other great feature that we could utilize! :)

It bugs me enormously why we can't just have employee@wherever.com (deactivated) instead of having them disappear once and for all on Intercom. I can't retrieve my Support team's stats correctly from last month because I removed someone who left the company. Intercom's answer was to change their email and password and leave it there, paying their seat monthly to have access to their information.Does this make any sense to anyone?