Trust and security
Connect Wasl is built to align with the Saudi Personal Data Protection Law (PDPL). We act as a processor for the customer data our clients handle through the service, and we sign a PDPL-aligned Data Processing Agreement. This page explains the technical and organizational measures we take to protect your data.
Where is Connect Wasl data stored?
Our primary database and file storage run on Supabase in Frankfurt, Germany (AWS eu-central-1, EU). Some sub-processors are in the United States, so some data (for example, message content sent for AI replies or queued for delivery) is processed there. Our full sub-processor list and regions are published on our sub-processors page.
How is data encrypted?
Data is encrypted in transit with TLS and encrypted at rest by our infrastructure providers. WhatsApp media is stored in a private storage bucket that is not publicly accessible.
How do you keep one business's data separate from another's?
Every tenant's data is isolated at the database level using row-level security, so one account cannot read another account's conversations or contacts. Access is least-privilege, and account owners can enable two-factor authentication (TOTP).
How do you protect the platform itself?
Incoming WhatsApp webhooks are verified with a signature so we only accept authentic events. Public and sensitive endpoints are rate limited, and sign-up is protected by a bot check (Cloudflare Turnstile).
How long do you keep data, and how is it deleted?
When an account is closed we soft-delete it and retain it for 30 days (in case of accidental deletion or a dispute), then purge it, unless a longer period is legally required. Customers can also request deletion of specific data.
What happens if there is a security incident?
We detect and triage incidents, contain them, and keep an incident register. If a personal data breach affects customer data, we notify the affected controller without undue delay and within 24 hours of becoming aware, so the controller can meet its own regulatory notification duties.
Related
Security questions: info@connectwasl.com