Security
Bagaimana kami melindungi akun, data, dan bisnis Anda dari ancaman digital.
Last updated: 7/30/2026
Your Data Security
Security is not an add-on. It is the foundation of every technical decision we make. Your business data and customer conversations are protected to enterprise standards.
Encryption
In Transit
All data moving between your browser, our server, and the WhatsApp gateway is protected with TLS 1.3. No data travels unencrypted.
At Rest
The database is encrypted with AES-256. Daily backups are also encrypted and stored separately.
Authentication & Access
- Passwords are hashed with bcrypt (cost factor 12)
- Session tokens expire automatically
- Rate limiting prevents brute-force attacks
- Two-factor authentication (coming soon)
- Audit logs for every dashboard action
WhatsApp Risks & Disclaimer
Understanding the Risks
Our platform uses an unofficial WhatsApp integration through Fonnte. This carries specific risks you need to understand:
- WhatsApp may restrict or block your number at any time
- Meta, the owner of WhatsApp, does not support unofficial automation
- WhatsApp features may change without notice and affect our service
User Acknowledgment:
“I understand that WhatsApp may block my account and that Fonnte/diurusinai.com is not responsible. I use this service at my own risk.”
We recommend:
- Use a dedicated business WhatsApp number, not your primary personal number
- Avoid spam—message only customers who have interacted with you
- Monitor the account regularly for early warning signs
- Keep a backup number in case the account is blocked
Backups & Disaster Recovery
Your data remains protected even in a worst-case scenario:
- Automatic backups every 6 hours to a separate geographic location
- Recovery Point Objective (RPO): no more than 6 hours of data loss
- Recovery Time Objective (RTO): service restored within 2 hours
- Restore tests run monthly to verify backup integrity
Vulnerability Reporting
If you find a security vulnerability, report it to security@diurusinai.com. We respond within 24 hours and reward valid reports.