Home/Zero-Credential Standard
SOC-2 Least-Privilege Onboarding Standard

The Zero-Credential Standard

Deploy Switchboard across WhatsApp, Instagram, Facebook Messenger, Email, Telegram, and SMS without ever sharing your master passwords, personal logins, or two-factor authentication codes.

Zero Master Passwords

We never ask for or store your personal Facebook, Instagram, Google, or email account passwords. All integrations use official token-based delegation.

Scoped Least-Privilege

Permissions are strictly isolated to customer messaging operations. Switchboard cannot view financial data, modify page ownership, or access personal files.

1-Click Instant Revocation

You maintain 100% master ownership at all times. Any delegated access can be removed instantly with a single click inside your Meta or Twilio business settings.

Scope of Supported Channels: Switchboard is purpose-built for real-time customer, client, and patient operations messaging across professional services, healthcare clinics, dental practices, legal firms, and e-commerce. We natively support WhatsApp Business, Instagram Direct, Facebook Messenger, Domain Email, Telegram, SMS/Voice, Web Live Chat, and LINE. Video/comment streaming platforms (such as YouTube) are not supported as inbound operational inboxes.

Channel Delegation Playbooks

Cross-referenced with official developer documentation from Meta, Google, Telegram, and Twilio.

📱

WhatsApp Business

1-Click Modal Verification OR Meta Business Suite Partner Sharing

Official Meta Cloud API

Connect your WhatsApp Business number directly through Meta's verified modal dialog or by delegating your WhatsApp Business Account (WABA) in Meta Business Manager. No WhatsApp Web QR codes or private passwords.

What You Do (Client Action)

  • 1Option A (Self-Service Modal): Inside Switchboard, click 'Connect WhatsApp Business'. Meta's official modal launches on your screen. Select your business and enter the SMS OTP sent to your phone.
  • 2Option B (Agency Delegation): In Meta Business Suite (business.facebook.com) > Settings > Partners > Add Partner, enter Switchboard's Business ID and grant 'Manage WABA' permission.

What Switchboard Receives (Security Scope)

Switchboard receives a scoped WABA access token and phone number ID. Zero access to personal WhatsApp chats or phone data.

Meta Embedded Signup Official Documentation
📷

Instagram Direct & Facebook Messenger

Meta Business Suite Scoped Messaging Delegation

Meta Business Partner

Delegate customer messaging permissions through Meta's native agency partner framework. Your personal Facebook account, administrative ownership, and billing remain 100% untouched.

What You Do (Client Action)

  • 1Navigate to business.facebook.com and select your business account.
  • 2Go to Settings > Users > Partners, then click 'Give partner access to assets'.
  • 3Enter Switchboard's Meta Partner Business ID and select your Facebook Page / Instagram account.
  • 4Toggle on 'Messaging / Community Management' permissions and click Confirm.

What Switchboard Receives (Security Scope)

Grants Switchboard API permission to read and reply to direct customer inquiries. Switchboard cannot edit page details, run ad spend, or access personal messages.

Meta Business Help: Partner Roles & Asset Access
📧

Custom Domain Email

DNS Authentication (SPF/DKIM) & Zero-Password Auto-Forwarding

DNS Records + Forwarding

We never ask for Google Workspace, Microsoft 365, or IMAP/SMTP passwords. Inbound emails forward automatically, while outbound responses authenticate via your domain's DNS records.

What You Do (Client Action)

  • 1Inbound: In your Google Workspace or Microsoft 365 admin console, configure an automatic forwarding rule for support@yourdomain.com to forward incoming mail to your dedicated Switchboard inbound inbox.
  • 2Outbound: Add standard CNAME / TXT records (SPF and DKIM cryptographic signatures) in your domain DNS manager (Cloudflare, GoDaddy, Route53, Namecheap).

What Switchboard Receives (Security Scope)

Switchboard receives customer support emails forwarded by your server and sends authenticated replies. Zero access to your private employee mailboxes or Google Drive.

Google Workspace Official Email Forwarding Guide
✈️

Telegram

Scoped HTTP Bot API Token via @BotFather

Bot Platform Token

Deploy customer support and automated triage on Telegram without linking your personal phone number or Telegram account.

What You Do (Client Action)

  • 1Open Telegram and start a chat with the official @BotFather account.
  • 2Send the command /newbot and follow prompts to name your bot (e.g., @ApexOpsSupportBot).
  • 3Copy the HTTP Bot API token provided by BotFather and paste it into Switchboard.

What Switchboard Receives (Security Scope)

The token strictly controls that single bot instance. It provides zero access to your personal chats, contacts, or Telegram account settings.

Telegram Bot Platform Specifications
💬

SMS & Voice (Twilio)

Isolated Twilio Subaccounts or Scoped Developer Roles

Subaccount Isolation

Route business SMS and interactive voice triage without sharing your primary Twilio master credentials or payment details.

What You Do (Client Action)

  • 1Option A (Subaccount): In Twilio Console, create a dedicated Subaccount named 'Switchboard SMS'. Provide the subaccount SID and auth token.
  • 2Option B (User Invite): In Twilio Console > Settings > Manage Users, invite deploy@switchboard.ai with the 'Developer' role (not Administrator or Billing).

What Switchboard Receives (Security Scope)

Restricted exclusively to messaging and voice dispatch on your designated number. Switchboard has no access to your payment methods or master account.

Twilio Subaccounts & Identity Architecture

Switchboard Meta Partner ID

Use this Partner ID when granting messaging asset access inside Meta Business Suite (business.facebook.com).

SWITCHBOARD-META-PARTNER-ID

Frequently Asked Questions

Will Switchboard ever ask for my personal Facebook or Google password?

Never. Switchboard connects exclusively through official OAuth modals or Meta Business Manager Partner IDs. We have strict engineering controls prohibiting staff from requesting or recording master account credentials.

Can Switchboard lock me out of my accounts or take over my business?

It is technically impossible. Partner access grants scoped messaging permissions only. You retain 100% administrative ownership and can revoke Switchboard’s access in one click at any time from your platform dashboard.

How does this work for regulated industries requiring HIPAA, BAA, or attorney-client compliance?

For regulated organizations (such as medical and dental practices subject to HIPAA or legal firms requiring privileged data isolation), Switchboard offers a Bring Your Own Cloud (BYOC) single-tenant deployment tier where the entire stack runs within your private AWS, Azure, or GCP infrastructure under your existing Business Associate Agreements (BAA) and SOC 2 security controls.