Security
Last updated 12 August 2026
What we claim, and what we do not
This page describes what we actually do. We hold no security certifications, and we would rather say so than imply otherwise.
In transit and at rest
Everything between your device and us travels over an encrypted connection. Documents and the records read from them are stored on encrypted disks.
Separation between companies
Every record belongs to exactly one company, and every request is checked against the company of the person making it. There is no view in the product that crosses that line.
Signing in
There are no passwords, so there are no passwords to steal. You sign in with a one-time code sent to your registered WhatsApp number or email address, and codes expire quickly.
Our own access
Administrative access is held by a small number of people, is protected by a separate credential from any customer login, and every use of it is recorded with the time and the device.
Backups
Backups are taken every day and held in a different region from the live system. We restore from them periodically to check they actually work, because an untested backup is not a backup.
Reporting a problem
If you find a security weakness, tell us on WhatsApp at +971 50 955 3384 before telling anyone else, and we will work with you on it.