Hosting & Data Security Compliance

Hosting & Data Security Compliance

We host with Amazon Web Services, and all our data is stored solely in the United States. Our servers are protected by firewalls, and all access to those servers is permitted only through encrypted channels that are FIPS-140-2 compliant, and data is fully encrypted at rest.

Contact Information Anonymization

We understand that some use cases require contact information to be handled sensitively. With this in mind, we added an anonymization feature that'll replace each contact's name with a random code and completely remove their address (their phone number, or an ID associated with their Facebook or Telegram accounts):

Note that 'None' is the default value displayed for empty custom contact fields.

When the anonymization feature is enabled, each new contact profile, whether imported via a spreadsheet or generated when a new contact interacts with one of your channels, is anonymized. The contact's UUID, groups, language preference, and custom fields will still be accessible. By the same token, exported contact and flow information will also be anonymized.

Note that this feature is permanent once an account has been anonymized.

If this isn't sufficient, we're interested to learn how we might improve this feature to accommodate a broader range of use cases.

Contact us via the support widget in the bottom right-hand corner to enable this feature.

Data Transfer to/from the Platform

There are four methods through which data can be transferred to/from the platform:

Contact information is imported (a spreadsheet containing contacts' names, phone numbers, and any other information you wish to include).

A contact interacts with your account via one of multiple possible channels, where the contents of the messages you've sent them and their responses are stored.

A Webhook is used to fetch information from an external database to be used in a flow or referenced in a message, or post information (stored as flow variables) collected within that workflow to an external system.

Our API is used to facilitate data transfer from your system to our platform and vice versa. An example of this might be creating an API protocol that enables your system to modify contacts, start flows, or send messages.

Updated on: 17/12/2024