SAML (Security Assertion Markup Language)
The XML-based standard behind enterprise single sign-on. SAML lets an identity provider, such as Okta or Azure AD, assert a user’s authenticated identity to connected applications, so employees log in once and gain access to everything. SAML integration is a common enterprise procurement requirement, especially in regulated industries where centralised user lifecycle management is a compliance control.
Read full entry →
SCIM (System for Cross-domain Identity Management)
The IETF standard (RFC 7643 and 7644) for automatically creating, updating and deactivating user and group accounts in applications from an identity provider. Covers the REST and JSON protocol, why deprovisioning is an audit control, the JIT and custom-API alternatives, and Ethora’s API-provisioned end-user model.
Read full entry →
Screen Sharing
Capturing a screen, window or browser tab as a live video track in a call. Covers the getDisplayMedia API and its picker, content hints for text versus motion, why mobile browsers cannot capture but native apps can, and the privacy habits that matter when the screen holds patient or account data.
Read full entry →
SDK (Software Development Kit)
A packaged set of libraries, APIs, tools, sample code and documentation for building on a platform. How an SDK differs from an API, a library and a framework, what to look for in a messaging SDK, and the Chat SDK, AI SDK, npm packages and MCP server that Ethora ships.
Read full entry →
Secure Messaging
Chat that regulated organisations can trust: encrypted in transit and at rest, gated by authentication and access controls, recorded in an audit trail and retained or erased by policy. Explains the layers behind the label and the choice between end-to-end encryption and the compliance-archive model.
Read full entry →
Semantic Search
Semantic search retrieves content by meaning, not by matching exact words. It uses AI embeddings to represent queries and documents as vectors, then finds the closest matches in a vector database. The result is search that understands synonyms, paraphrases and intent, and it is the retrieval layer that makes RAG pipelines accurate and AI assistants genuinely useful.
Read full entry →
Semantic Versioning (SemVer)
MAJOR.MINOR.PATCH with rules about which number moves: SemVer 2.0.0 lets a version number say whether an update breaks, adds or fixes. Covers caret and tilde ranges in npm, pre-release tags and how calendar versioning compares. Ethora’s packages use year.month.patch numbers that stay valid SemVer.
Read full entry →
Sentiment Analysis
Automatically reading the emotional tone of text as positive, negative or neutral, with intensity and specific emotions in richer forms. Covers lexicon, classifier and LLM approaches, how support chat uses it for routing and CSAT, its limits, and how an Ethora agent scores tone while Trust & Safety enforces policy.
Read full entry →
Server-Sent Events (SSE)
Server-Sent Events (SSE) lets a server stream a continuous feed of text events to a browser over plain HTTP. The browser’s built-in EventSource API handles reconnection automatically. SSE is unidirectional (server to client only), which makes it ideal for AI token streaming, activity feeds and live notifications, while WebSocket is the better choice for bidirectional chat.
Read full entry →
Server-Side Rendering (SSR)
Generating a page’s HTML on the server for each request, then hydrating it in the browser. Covers SSR versus client-side rendering, static generation and streaming, the hydration mismatch rule, and why real-time chat components such as Ethora’s React component are rendered client-only inside a Next.js app.
Read full entry →
Service Worker
A background script the browser runs apart from any page: it caches for offline use, intercepts requests and receives push messages when no tab is open. Covers the lifecycle, scope, HTTPS requirement and web push. Ethora delivers web push through Firebase Cloud Messaging via a service worker, with self-serve credentials in the admin panel.
Read full entry →
SFU (Selective Forwarding Unit)
The media server architecture behind scalable group video calling. An SFU receives one stream from each participant and routes individual streams to each other participant without re-encoding, keeping server CPU low. Per-subscriber simulcast layer selection means every participant gets the quality their network can support.
Read full entry →
Shadow DOM
A private DOM subtree with scoped CSS attached to an element, so a component’s markup and styles stay separate from the page. Covers shadow roots, slots, open and closed modes and why it isolates styles but not scripts. Ethora’s assistant widget uses an iframe for the stronger boundary that sensitive conversations need.
Read full entry →
Sharding
Horizontal partitioning: data or traffic is split by a shard key across servers so capacity grows by adding machines. Covers shard-key design, MongoDB sharded clusters and why chat systems partition by room and by app. Ethora’s App containers and room model give a natural key on its ejabberd, Node.js and MongoDB backend.
Read full entry →
SIEM (Security Information and Event Management)
Security Information and Event Management: the system that collects, normalises, correlates and retains logs from across an organisation to detect threats and satisfy audit requirements. Covers how a SIEM works, why regulation makes it mandatory, and how Ethora’s audit trail export and Trust & Safety reports feed one.
Read full entry →
Simulcast
A WebRTC adaptive quality technique where a publisher transmits the same video at multiple resolutions and bitrates simultaneously. An SFU selects the right layer for each viewer based on their network, enabling every participant in a group call to receive the best quality their connection can support.
Read full entry →
Single-Tenant
One customer, one dedicated instance: servers, database and configuration shared with nobody else. Single-tenant deployments give regulated buyers a physical data boundary, independent configuration and a small blast radius, at a higher operating cost than multi-tenant SaaS. Ethora’s dedicated server is single-tenant; its managed cloud is multi-tenant with isolated Apps.
Read full entry →
SIP (Session Initiation Protocol)
The signalling protocol behind VoIP calls and video conferencing over IP. SIP handles session setup, codec negotiation, and teardown while media travels over RTP. It underpins enterprise PBX and carrier VoIP, and bridges to WebRTC-based calling through gateways.
Read full entry →
SLA (Service Layer Agreement)
A Service Level Agreement — a formal contract between a service provider and customer that defines the expected level of service with measurable standards and consequences for falling short. SLAs set clear expectations for availability and performance (such as uptime and support response times) and specify remedies like service credits when targets are missed.
Read full entry →
SLO (Service Level Objective)
An SLO is an internal reliability target that sits behind an SLA, covering metrics like uptime percentage, latency percentiles, and error rates. Cloud providers own the SLOs backing their SLAs; self-hosted deployments let you define and own SLOs that match your regulatory reporting requirements.
Read full entry →
Small Language Model (SLM)
A compact language model, typically under about ten billion parameters, that runs on a single GPU, a laptop or a phone. Covers examples (Phi, Gemma, small Llama, Mistral 7B), quantization, local serving with Ollama and vLLM, and why regulated teams pair an SLM with retrieval on infrastructure they own.
Read full entry →
SMS (Short Message Service)
The cellular carrier protocol for sending text messages without a data connection or app. SMS has near-universal reach and is widely used for OTP codes and transactional alerts, but lacks encryption, read receipts, and rich media. In-app chat provides a richer, more controllable alternative for ongoing product communication.
Read full entry →
SOC 2
An independent CPA firm’s attestation report on a service provider’s controls against the AICPA Trust Services Criteria: security, plus optional availability, processing integrity, confidentiality and privacy. Explains Type I versus Type II, how SOC 2 relates to ISO 27001 and HIPAA, and how to read a vendor’s report during due diligence.
Read full entry →
SRTP (Secure Real-time Transport Protocol)
The encrypted profile of RTP defined in RFC 3711. SRTP adds AES encryption, an authentication tag and replay protection to every voice and video packet. WebRTC keys it with DTLS-SRTP and forbids plain RTP; through an SFU it protects each hop rather than the whole path.
Read full entry →
SSO (Social Sign-On)
Social Sign-On — an authentication method that lets users log in with existing credentials from services like Google, Facebook, Apple or LinkedIn. Built on OAuth 2.0, it authenticates through trusted identity providers, removing the need for separate usernames and passwords while improving both convenience and security.
Read full entry →
State Management
How an application stores, updates and shares its data across components. Compares context, Zustand, Redux Toolkit and server-state caches, explains why real-time chat with messages, unread counts and presence needs a store discipline, and where an SDK that manages its own connection state fits alongside your app’s store.
Read full entry →
Streamable HTTP (MCP transport)
The Model Context Protocol transport for network servers since revision 2025-03-26: one endpoint, JSON-RPC over POST with JSON or Server-Sent Events replies, an optional GET stream, the Mcp-Session-Id header and resumable streams. Explains why it replaced the two-endpoint HTTP+SSE transport and how the hosted Ethora server uses it.
Read full entry →
STUN and TURN
The NAT traversal protocols that make WebRTC calls reliable across firewalls and NAT routers. STUN discovers the public IP and port each peer presents to the internet; TURN acts as a media relay when direct connections fail. Together they ensure video and voice calls connect even on strict corporate or mobile networks.
Read full entry →
System Prompt
The standing instruction a language model reads before any user message: its role, tone, rules, scope and tools. Covers what belongs in a system prompt, why it is not a security boundary (prompt injection), practical prompt craft, and per-agent prompts in Ethora’s AI SDK.
Read full entry →