Hosting & Data Security Compliance

We host with Amazon Web Services, and all our data is stored solely in the United States. Our servers are protected by firewalls, all access to them is permitted only through encrypted channels that are FIPS 140-2 compliant, and data is fully encrypted at rest.

Contact Information Anonymization

Some use cases require contact information to be handled sensitively. For these, we offer an anonymization feature that replaces each contact's name with a random code and completely removes their address (their phone number, or the ID associated with their Facebook or Telegram account).

When anonymization is enabled, every new contact is anonymized, whether it's imported from a spreadsheet or created when someone interacts with one of your channels. The contact's UUID, groups, language preference and custom fields remain accessible. Exported contact and flow data is anonymized as well.


Note that this feature is permanent once an account has been anonymized. If it doesn't meet your needs, we'd like to hear how we could improve it to cover more use cases. To enable this feature, contact us through the support widget in the bottom right-hand corner.

Data Transfer to/from the Platform

Data can be transferred to and from the platform in four ways:

Contact information is imported from a spreadsheet containing contacts' names, phone numbers and any other information you want to include.
A contact interacts with your account through one of your channels, and the messages you send them and their responses are stored.
A webhook fetches information from an external database to use in a flow or a message, or posts information collected in a flow (stored as flow variables) to an external system.
Our API is used to transfer data from your system to our platform and back. For example, you might build an integration that lets your system modify contacts, start flows or send messages.