Workspace isolation
Every product record and query is workspace-scoped and policy-checked.
Product capability
Architecture controls, explained without theatre.
Architecture controls, tenancy, encryption, backups, disclosure process and linked-device limitations.
Restricted device store
Linked-device material remains in a separate gateway database with limited credentials.
Encrypted recovery
Main and gateway databases use scoped backup repositories with restore verification.
Scoped storage
Temporary, retained, asset and backup storage roles use separate credentials.
Idempotent delivery
Commands and events are duplicate-safe; ambiguous submissions are not blindly retried.
Content-safe telemetry
Metrics and logs avoid message content, phone numbers, QR data, keys and provider payloads.
02
Honest limitations
Security controls do not remove linked-device platform risk.
No official approval claim.The service is not presented as a Meta business solution provider.
No ban-proof claim.WhatsApp may restrict accounts or change linked-device behavior.
No certification claim.Only completed, independently supported certifications may appear here.
Security disclosure
View contact paths
Report a vulnerability without including customer data.
The final page will publish a monitored security address, response expectations and an optional security.txt link after the process is approved.