WOOPCHAT LogoWOOPCHAT
Back to home
Enterprise Security

Security & Infrastructure

How Woopchat isolates data, safeguards credentials, and maintains uptime.

Encrypted at Rest & Transit

All WhatsApp credentials, tokens, and messages are encrypted using AES-256-GCM and TLS 1.3.

Tenant Isolation

Strict organization-level boundaries enforced at the PostgreSQL database and API layers.

Role-Based Access

Granular permissions for owners, administrators, agents, and automation builders.

WhatsApp Session Protection

Connecting WhatsApp devices via Baileys requires cryptographic session keys. Woopchat persists session keys in isolated database tables, ensuring that sessions survive server restarts and memory recycles without exposing unencrypted keys.

Reporting a Vulnerability

We welcome responsible disclosure from security researchers. If you believe you have discovered a vulnerability, please email [email protected] with steps to reproduce.