Trust
Security at WA.Direct
How we protect your workspace, your leads, and your customers with tenant isolation, server-side access control, and privacy-first tracking.
How we protect your data
Every workspace is isolated, access is role-based and enforced on the server, admin actions are audited, and public endpoints are rate-limited where user input is accepted. Admin MFA, managed backups, and external incident monitoring are production-readiness steps before broad public launch.
- Per-workspace data isolation
- Role-based access control
- Hashed analytics signals
- Signed webhooks
- Rate-limited auth and form endpoints
- Audited admin mutations
Privacy by design
WA.Direct measures clicks, scans, form submissions, and routing decisions. It does not read or store WhatsApp or Telegram message content.