Your trust.
Our responsibility.
Security, privacy and compliance are built in from the start - not bolted on.
Protected at every layer.
Built for GDPR & DPDP
Designed around UK GDPR and India's DPDP Act 2023: clear notices, one-click consent withdrawal, and data requests from Settings. Customer data is never sold and never used to train AI models.
Encryption
Encrypted in transit (TLS) and at rest. Channel tokens are also encrypted with AES-256-GCM using a key per business. Webhooks from Meta and Stripe are signature-verified.
Tenant data isolation
Every request is checked against the business it belongs to, so no other business can reach your conversations, contacts or configuration.
EU data residency
Primary hosting in Germany (EU). Transfers to vetted sub-processors are protected by the UK IDTA and EU Standard Contractual Clauses.
Everything in writing.
Every business accepts these at signup, with a signed, timestamped record.
Ask us anything.
Our security team responds to every enquiry within 24 hours.