SAML (Security Assertion Markup Language)
The XML-based standard behind enterprise single sign-on. SAML lets an identity provider, such as Okta or Azure AD, assert a user’s authenticated identity to connected applications, so employees log in once and gain access to everything. SAML integration is a common enterprise procurement requirement, especially in regulated industries where centralised user lifecycle management is a compliance control.
Read full entry →
SCIM (System for Cross-domain Identity Management)
The IETF standard (RFC 7643 and 7644) for automatically creating, updating and deactivating user and group accounts in applications from an identity provider. Covers the REST and JSON protocol, why deprovisioning is an audit control, the JIT and custom-API alternatives, and Ethora’s API-provisioned end-user model.
Read full entry →
Secure Messaging
Chat that regulated organisations can trust: encrypted in transit and at rest, gated by authentication and access controls, recorded in an audit trail and retained or erased by policy. Explains the layers behind the label and the choice between end-to-end encryption and the compliance-archive model.
Read full entry →
Semantic Search
Semantic search retrieves content by meaning, not by matching exact words. It uses AI embeddings to represent queries and documents as vectors, then finds the closest matches in a vector database. The result is search that understands synonyms, paraphrases and intent, and it is the retrieval layer that makes RAG pipelines accurate and AI assistants genuinely useful.
Read full entry →
Sentiment Analysis
Automatically reading the emotional tone of text as positive, negative or neutral, with intensity and specific emotions in richer forms. Covers lexicon, classifier and LLM approaches, how support chat uses it for routing and CSAT, its limits, and how an Ethora agent scores tone while Trust & Safety enforces policy.
Read full entry →
Server-Sent Events (SSE)
Server-Sent Events (SSE) lets a server stream a continuous feed of text events to a browser over plain HTTP. The browser’s built-in EventSource API handles reconnection automatically. SSE is unidirectional (server to client only), which makes it ideal for AI token streaming, activity feeds and live notifications, while WebSocket is the better choice for bidirectional chat.
Read full entry →
SFU (Selective Forwarding Unit)
The media server architecture behind scalable group video calling. An SFU receives one stream from each participant and routes individual streams to each other participant without re-encoding, keeping server CPU low. Per-subscriber simulcast layer selection means every participant gets the quality their network can support.
Read full entry →
SIEM (Security Information and Event Management)
Security Information and Event Management: the system that collects, normalises, correlates and retains logs from across an organisation to detect threats and satisfy audit requirements. Covers how a SIEM works, why regulation makes it mandatory, and how Ethora’s audit trail export and Trust & Safety reports feed one.
Read full entry →
Simulcast
A WebRTC adaptive quality technique where a publisher transmits the same video at multiple resolutions and bitrates simultaneously. An SFU selects the right layer for each viewer based on their network, enabling every participant in a group call to receive the best quality their connection can support.
Read full entry →
Single-Tenant
One customer, one dedicated instance: servers, database and configuration shared with nobody else. Single-tenant deployments give regulated buyers a physical data boundary, independent configuration and a small blast radius, at a higher operating cost than multi-tenant SaaS. Ethora’s dedicated server is single-tenant; its managed cloud is multi-tenant with isolated Apps.
Read full entry →
SIP (Session Initiation Protocol)
The signalling protocol behind VoIP calls and video conferencing over IP. SIP handles session setup, codec negotiation, and teardown while media travels over RTP. It underpins enterprise PBX and carrier VoIP, and bridges to WebRTC-based calling through gateways.
Read full entry →
SLA (Service Layer Agreement)
A Service Level Agreement — a formal contract between a service provider and customer that defines the expected level of service with measurable standards and consequences for falling short. SLAs set clear expectations for availability and performance (such as uptime and support response times) and specify remedies like service credits when targets are missed.
Read full entry →
SLO (Service Level Objective)
An SLO is an internal reliability target that sits behind an SLA, covering metrics like uptime percentage, latency percentiles, and error rates. Cloud providers own the SLOs backing their SLAs; self-hosted deployments let you define and own SLOs that match your regulatory reporting requirements.
Read full entry →
Small Language Model (SLM)
A compact language model, typically under about ten billion parameters, that runs on a single GPU, a laptop or a phone. Covers examples (Phi, Gemma, small Llama, Mistral 7B), quantization, local serving with Ollama and vLLM, and why regulated teams pair an SLM with retrieval on infrastructure they own.
Read full entry →
SMS (Short Message Service)
The cellular carrier protocol for sending text messages without a data connection or app. SMS has near-universal reach and is widely used for OTP codes and transactional alerts, but lacks encryption, read receipts, and rich media. In-app chat provides a richer, more controllable alternative for ongoing product communication.
Read full entry →
SRTP (Secure Real-time Transport Protocol)
The encrypted profile of RTP defined in RFC 3711. SRTP adds AES encryption, an authentication tag and replay protection to every voice and video packet. WebRTC keys it with DTLS-SRTP and forbids plain RTP; through an SFU it protects each hop rather than the whole path.
Read full entry →
SSO (Social Sign-On)
Social Sign-On — an authentication method that lets users log in with existing credentials from services like Google, Facebook, Apple or LinkedIn. Built on OAuth 2.0, it authenticates through trusted identity providers, removing the need for separate usernames and passwords while improving both convenience and security.
Read full entry →
Streamable HTTP (MCP transport)
The Model Context Protocol transport for network servers since revision 2025-03-26: one endpoint, JSON-RPC over POST with JSON or Server-Sent Events replies, an optional GET stream, the Mcp-Session-Id header and resumable streams. Explains why it replaced the two-endpoint HTTP+SSE transport and how the hosted Ethora server uses it.
Read full entry →
STUN and TURN
The NAT traversal protocols that make WebRTC calls reliable across firewalls and NAT routers. STUN discovers the public IP and port each peer presents to the internet; TURN acts as a media relay when direct connections fail. Together they ensure video and voice calls connect even on strict corporate or mobile networks.
Read full entry →
System Prompt
The standing instruction a language model reads before any user message: its role, tone, rules, scope and tools. Covers what belongs in a system prompt, why it is not a security boundary (prompt injection), practical prompt craft, and per-agent prompts in Ethora’s AI SDK.
Read full entry →