WhatsAppYour customer data, treated like ours.
WallzaOS is built for businesses that can't afford a leak — D2C, BFSI, healthcare, education. This page is maintained by WallzaOS to answer common security questions about the platform.
Encryption
TLS 1.3 for data in transit. AES-256 for data at rest. Per-tenant keys for sensitive fields.
Access control
Role-based permissions, SSO via Google Workspace, optional SAML, mandatory 2FA for admins.
Audit logs
Every message, edit, login and export is logged with actor, IP and timestamp. Exportable on request.
Regional data residency
Choose where customer data lives — AWS Mumbai (ap-south-1), Frankfurt (eu-central-1) or N. Virginia (us-east-1). No cross-border transfer by default.
Meta-approved BSP
Direct connection to Meta Cloud API. No gray routing, no third-party hops, no rate-limit risk.
Vulnerability program
Coordinated disclosure via security@wallzaos.app. We respond within 48 hours.
Where WallzaOS ends, you begin
WallzaOS owns
- · Platform infrastructure & encryption
- · Meta BSP connectivity & uptime
- · Backup, restore & data residency
- · Vulnerability monitoring & patching
You own
- · User access & strong passwords / 2FA
- · What you message and to whom (consent)
- · Content of templates and campaigns
- · Local regulatory compliance (DPDP, RBI, etc.)
This page describes current platform capabilities. It is not an independent certification. For compliance questionnaires, DPAs or security assessments, contact security@wallzaos.app.
Need a security review?
We respond to security questionnaires and DPA requests within 48 hours.
Contact security team →Answers before you ask
Is data encrypted?+
Yes. Data is encrypted in transit and at rest, with strict access controls and audit logging on administrative actions.
Do you sign a DPA?+
Yes. We provide a data processing agreement and respond to security questionnaires, typically within 48 hours.
Where is data stored?+
Data is hosted with major cloud providers in secure regions, with backups and monitoring in place. Region preferences can be discussed for larger accounts.
Can I control who sees what?+
Yes. Role-based access, per-workspace permissions and audit trails let you scope exactly what each team member can view or change.
