Security

Bagaimana kami melindungi akun, data, dan bisnis Anda dari ancaman digital.

Last updated: 7/30/2026

Your Data Security

Security is not an add-on. It is the foundation of every technical decision we make. Your business data and customer conversations are protected to enterprise standards.

Encryption

In Transit

All data moving between your browser, our server, and the WhatsApp gateway is protected with TLS 1.3. No data travels unencrypted.

At Rest

The database is encrypted with AES-256. Daily backups are also encrypted and stored separately.

Authentication & Access

  • Passwords are hashed with bcrypt (cost factor 12)
  • Session tokens expire automatically
  • Rate limiting prevents brute-force attacks
  • Two-factor authentication (coming soon)
  • Audit logs for every dashboard action

WhatsApp Risks & Disclaimer

Understanding the Risks

Our platform uses an unofficial WhatsApp integration through Fonnte. This carries specific risks you need to understand:

  • WhatsApp may restrict or block your number at any time
  • Meta, the owner of WhatsApp, does not support unofficial automation
  • WhatsApp features may change without notice and affect our service

User Acknowledgment:

“I understand that WhatsApp may block my account and that Fonnte/diurusinai.com is not responsible. I use this service at my own risk.”

We recommend:

  • Use a dedicated business WhatsApp number, not your primary personal number
  • Avoid spam—message only customers who have interacted with you
  • Monitor the account regularly for early warning signs
  • Keep a backup number in case the account is blocked

Backups & Disaster Recovery

Your data remains protected even in a worst-case scenario:

  • Automatic backups every 6 hours to a separate geographic location
  • Recovery Point Objective (RPO): no more than 6 hours of data loss
  • Recovery Time Objective (RTO): service restored within 2 hours
  • Restore tests run monthly to verify backup integrity

Vulnerability Reporting

If you find a security vulnerability, report it to security@diurusinai.com. We respond within 24 hours and reward valid reports.