← Back to Home

Security

Onedesk Pro is operated by Typetech IT. This page summarizes the concrete controls we apply to protect workspace and customer data—without claiming controls we have not verified for public marketing.

Encryption

  • TLS in transit; WhatsApp, Instagram, and Facebook channel access tokens are encrypted at rest with AES-256-GCM before storage. Conversation content encryption at rest is not claimed on this site.
  • Channel token encryption uses application-level AES-256-GCM (authenticated encryption) before tokens are written to the database. This is verified in the WhatsApp, Instagram, and Facebook channel connect/refresh flows.
  • Database and object storage used by the application are hosted on managed cloud infrastructure. Managed hosting alone is not a claim that all conversation content is encrypted at rest.
  • We do not currently publish a verified claim that all conversation content is encrypted at rest.

Access control

  • Workspace-scoped authentication for dashboard users.
  • Role-based workspace membership for owners and members.
  • Webhook signature verification for incoming Meta platform events.
  • Session-based access to the dashboard after Magic Link, Google, or password sign-in.

Integrations & secrets

  • Channel tokens and other sensitive credentials are treated as secrets and stored with encryption at rest as described above.
  • AI reply generation may use approved subprocessors under our Privacy Policy. We do not publish a specific model vendor name on this page.

Data residency

We do not currently publish a customer-selectable data residency region. Application and supporting infrastructure run on managed cloud providers. For contractual residency requirements, contact us before onboarding.

Incident response

Security reports to joshio@onedeskpro.com are triaged by the operating team. We investigate confirmed issues, contain impact where possible, and notify affected workspace owners when we believe customer data was involved. We do not publish guaranteed response SLAs on this page.

Data ownership

Your organization owns its customer conversation data and uploaded knowledge-base content. We process that data only to provide the service described in our Privacy Policy. Account and workspace deletion steps are documented on Data Deletion.

Reporting issues

Report a security concern via Contact → Security or email joshio@onedeskpro.com.