Security

Infrastructure

• Hosted on Vercel's global edge network with DDoS protection
• Database hosted on Supabase with SOC 2 Type II compliance
• All data encrypted in transit (TLS 1.3) and at rest (AES-256)

Authentication

• Supabase Auth with secure session management
• Passwords hashed using industry-standard algorithms
• API keys and tokens encrypted before storage

WhatsApp Data

• WhatsApp access tokens encrypted at rest
• Message content processed in real-time and not stored longer than necessary
• All API calls to Meta use HTTPS with certificate pinning

Reporting

If you discover a security vulnerability, please report it to security@techupservices.in. We take all reports seriously and will respond promptly.