Security
Your customers’ data, handled with care
What WaBizBox does today to protect your team’s accounts and your customers’ data.
Sign-in and access
Hashed passwords
Passwords are hashed with scrypt.
Limited guessing
Wrong guesses are limited per connection. Sign-in gives the same answer for an unknown email and a wrong password, so it doesn’t reveal who has an account.
Sessions you can end
See where you’re signed in and sign out other browsers. Deactivating someone signs them out everywhere at once.
Roles and per-number access
Admins change numbers, automation and people; agents answer chats. Each person sees only the numbers they’re given. Every change made in settings goes in the activity log.
Every business kept apart
No way into another business
One business can never reach another’s chats.
Checked on every inbox query
Every inbox query checks that the person answers that number.
Encryption
Access tokens encrypted at rest
A WhatsApp access token you give us for a number is encrypted with AES-256-GCM.
The key is kept apart
The key is kept apart from the database and never goes into a backup, so a backup alone cannot send as anyone.
In a backup
- The database, with access tokens still encrypted
- The stored files
Never in a backup
The encryption key
Backups
Every night
The database and the stored files are backed up nightly.
Checked before it’s kept
Each backup has SHA-256 checksums and checks itself before it is kept.
Kept up to 30 days
Each backup is kept for at most 30 days.
An alert if one fails
A failed backup sends an alert email.
Customers’ choices and privacy
Opt-outs that stick
Every marketing opt-out is also written to a separate log, so restoring a backup can’t undo a customer’s “no”.
Erasure on request
AKASOFT erases one customer’s data when the business asks, and it stays erased through any later restore.
Files kept for a set time
Files customers send are deleted after the number’s retention period. The message stays.
Calls aren’t recorded
We keep only when a call rang, who answered and how long it lasted.
The web app
HTTPS only
WaBizBox works over HTTPS only.
Security headers
Security headers and a Content Security Policy are sent with the app.
Other sites turned away
Requests from other sites are turned away.
Data is stored on our server in Mumbai, India.
Questions about security?
Write to info@akasoft.io.
See your WhatsApp chats in one place.
We’ll show you WaBizBox with your own use case, and what you need ready in Meta.