Trust is an operating system.

Enterprise and public-sector deals stall without a clear security story. Here is ours — residency, POPIA, encryption, retention, access, and audit — stated without theatre.

Data residency & hosting

Run managed on our infrastructure or scope self-hosted / dedicated tenancy when your security model requires it. Residency constraints are part of Enterprise scoping — not an afterthought.

POPIA alignment

Purpose limitation, collection notices in-chat, role-based inbox access, and retention schedules. You remain the responsible party; we supply operational controls and documentation packs.

Encryption & transit

WhatsApp end-to-end for user messages, TLS for platform APIs, and encrypted storage practices for application data. Media and documents follow the same access discipline as chat text.

Retention & deletion

Retention is configured per programme. Export and deletion workflows support subject-access and end-of-purpose requests. Informal chat exports to personal devices are trained against.

Access control & audit

Agent seats, role permissions, and exportable audit trails for consequential actions. SSO available on Enterprise. Handoff reasons and template sends are reviewable.

Subprocessors & Meta

WhatsApp / Meta is the messaging rail. Platform subprocessors are listed in customer agreements. We do not sell conversation content.

Need the compliance pack for procurement?

Talk to Sales