Security
Trust centre
How we protect your data and your customers' data.
Security practices
Tenant isolation
Every workspace's data is separated in the database with row-level security enforced on every query.
Encryption
TLS in transit. Secrets such as API keys and tokens are encrypted at rest.
Access control
Role-based permissions, two-factor authentication, and mandatory 2FA for all staff.
Audit trail
Staff access to a workspace is time-limited, logged and emailed to the workspace owner.
Backups
Encrypted continuous backups with point-in-time recovery, tested regularly.
Secure development
Code review, dependency scanning and automated tests on every change.
Sub-processors
| Name | Purpose | Location |
|---|---|---|
| Meta Platforms | WhatsApp, Instagram and Messenger messaging | Global |
| Stripe | Payments | United States / EU |
| Cloud hosting provider | Application hosting and storage | Your chosen region |
| Email delivery provider | Transactional email | EU |
| AI model providers (optional) | AI replies when enabled | United States / EU |
Your data
- Export or delete a person's data from Settings → Privacy
- Data processing agreement available below
- Request deletion of your data at whatsuite.io/legal/data-deletion
- Report a vulnerability to security@whatsuite.io
- Status page: status.whatsuite.io