Security & Compliance
Data Protection
Customer and message data is handled according to our Privacy Policy: access controls, secure storage, and retention limits.
Secure Infrastructure
HTTPS everywhere, server hardening, and role-based access so only authorized personnel manage systems.
API Security
WhatsApp Business API connections use official channels and secure credential storage; we follow Meta's platform requirements.
Compliance
We align with privacy regulations and WhatsApp's commerce and messaging policies when handling your data.
Our Approach to Security
Core Signal Group LLC is committed to protecting the security and privacy of our customers and their data. We build and operate software that connects businesses to the WhatsApp Business API and related messaging infrastructure. Because we handle messaging data and API credentials, we take security seriously and implement practices appropriate to the nature of our services. No system can be 100% secure; we strive to reduce risk through sensible controls and continuous improvement.
Infrastructure Security
Our website and services are delivered over HTTPS so that data in transit is encrypted. We rely on reputable hosting and infrastructure providers and apply server-side security measures such as access controls, updates, and monitoring. Access to production systems and customer data is limited to authorized personnel and follows the principle of least privilege. We do not store credentials or secrets in logs or in places where they could be exposed.
Data Handling
How we collect, use, store, and retain data is described in our Privacy Policy. Message data and other information processed through our integrations are handled in line with that policy: we use data to deliver and improve our services, we retain it only as long as necessary or as required by law, and we do not sell your data. Our data handling practices are designed to be consistent with applicable privacy regulations and with WhatsApp’s and Meta’s policies for business use.
API Integration Security
Our integrations with the WhatsApp Business API use official APIs and secure methods for storing and using credentials (such as access tokens). We follow Meta’s platform requirements and best practices for API security. Where applicable, we use rate limiting and monitoring to help detect and prevent abuse. We do not use unofficial or unsanctioned methods to access WhatsApp or other platforms.
Incident Response and Reporting
If we become aware of a security incident that may affect customer data or systems, we will assess and respond in a timely manner and, where required by law or contract, notify affected parties. If you believe you have found a security vulnerability in our systems or services, or if you have a security concern, please report it to us at contact@coresignalgroup.com. We welcome responsible disclosure and will respond to good-faith reports. Please do not disclose the issue publicly before we have had a chance to address it.
Continuous Improvement
We regularly review our security practices and update them as our services and the threat landscape evolve. We do not guarantee that our systems are immune to all possible attacks or failures; we aim to implement reasonable and proportionate measures to protect our customers and their data. If you have questions about our security practices, contact us at contact@coresignalgroup.com.