Your business data, kept apart and protected.

• A database for every workspaceEach workspace gets its own database, created when it is set up. Your leads, contacts, invoices and messages are not stored in a table shared with other customers.
• Secrets encrypted at restTokens and passwords we store for you, such as a WhatsApp token, are encrypted with a rotating key ring. A new key can be added and every secret re-encrypted without downtime.
• BackupsEvery database server is copied to off-server storage every night, and before each release that changes the database.
• Access controlMembers get roles, and permissions can be added or taken away per person. An app a member cannot use stays out of their menu and is refused by the server, not just hidden.
• Masking of personal dataPhone numbers and email addresses can be masked for roles that should not see them in full. A member with the right can reveal a value.
• Audit logWorkspace-wide events, such as team changes and actions Rappy carried out, are written to an audit log with who did it and when.
• Sign-in protectionFive wrong passwords lock password sign-in for 15 minutes. Sessions use a short-lived token held in memory and an httpOnly refresh cookie, with a check against cross-site requests.
• API keys you controlAPI keys are stored only as a hash and shown once. A key can do only what its scopes allow and what the member who made it may do. Webhook calls are signed.

Read the privacy policyAsk the team