ZaploombybeenaIT Solutions
Security · Zaploom

How Zaploom Protects Your Data

The safeguards that are in place today: HTTPS, role-based access, workspace isolation, signed webhooks and rate limits.

Start free trialView pricing
Channels
WhatsAppSMS
Compliance posture

What we have in place today

Zaploom does not hold SOC 2, ISO 27001 or HIPAA certification. Contact us if you need details for a vendor review.

Data deletion
Meta data deletion callback and account deletion on request
RBAC
Owner, admin, agent and viewer roles with workspace isolation
Audit logging
Logged for channel, template and campaign changes
Encryption
TLS for all traffic to Zaploom
Platform safeguards

Safeguards across the platform

How requests, data and access are protected.

Transport security
All traffic uses HTTPS, with HSTS and Content Security Policy headers. Incoming Meta webhooks are checked against their signature.
  • HTTPS enforced with HSTS
  • Content Security Policy headers
  • Webhook signature verification
CSRF protection
Requests that change data must come from the Zaploom site, unless they carry a valid API key or a signed webhook.
  • Origin-based CSRF validation
  • API key access for integrations
  • Signed webhook payload verification
Access controls
Every teammate has a role (owner, admin, agent or viewer) that limits what they can see and change.
  • Workspace-scoped roles
  • Signed session cookies
  • API keys stored as hashes
Infrastructure
Runs on Vercel with a Turso database, and errors are reported to Sentry.
  • Vercel serverless hosting
  • Turso database
  • Sentry error monitoring
Rate limiting
Sign-in, registration, API and webhook requests are rate limited per IP address to slow down abuse.
  • Sign-in and registration limits
  • API request limits per IP
  • Webhook request limits
Tenant isolation
Every query is scoped to your workspace, so one customer's data is never returned to another.
  • Workspace-scoped data access
  • Secrets kept in environment variables
  • Hashed passwords
Review developer security docs

Customer trust

Have security questions?

Email contact-us@beenait.com and we'll answer your security and data-handling questions.

Contact us

Questions about security?

Get in touch and we'll walk you through how Zaploom handles your data.

Create your workspaceRequest a demo