Enterprise Security & Trust

Security & Compliance

Last updated: March 2026•Worksensy Infrastructure & Integration Protection

At Worksensy, data security is engineered into every layer of our platform. From encrypted database architectures to rigorous Meta Webhook signature checks, we ensure your sales pipelines, client data, and access tokens are completely fortified.

1

Infrastructure & VPC Isolation

All Worksensy core services, databases, and microservices are hosted in isolated Virtual Private Clouds (VPC) with automated firewall rules. Direct public database access is strictly blocked.

Isolated VPC Subnets
Automated Firewall & WAF
2

End-to-End Encryption

We adopt rigorous technical safeguards including TLS 1.3 / SSL encryption for data in transit and AES-256 encryption for stored tokens, API secrets, and lead details at rest.

Cryptographic Key Management

Sensitive credentials and Meta access tokens are stored with hardware security module (HSM) supported encryption keys.

3

Meta Lead Ads Integration Security

In strict compliance with the Meta Platform Developer Policy (Section 4.b):

  • HMAC-SHA256 Webhook Verification: Every incoming Meta Webhook payload is cryptographically verified against the Meta App Secret before processing.
  • Minimal Scope Principle: We only request the exact Meta permissions required for lead ingestion and page sync.
  • Instant Token Revocation: When a user disconnects via Facebook settings, all stored tokens are immediately invalidated.
4

Zero Third-Party Data Selling

Strict Policy: Worksensy will NEVER sell, rent, license, or barter user data or incoming lead details to any data broker, advertiser, or third party for promotional campaigns. Your customer data remains strictly your property.

5

Granular Role-Based Access Control (RBAC)

Worksensy enforces strict internal permission gates. Sales agents only access leads assigned directly to them, while managers and administrators maintain audit oversight across team pipelines.

6

Data Retention & User Erasure

We fully respect international privacy mandates (GDPR, CCPA) and Meta user data erasure requirements. All erasure requests are processed within 48 to 72 hours.

View User Data Deletion Instructions

Vulnerability Disclosure & Security Contact

If you discover a security vulnerability or have questions regarding our technical safeguards, please report it to our security response desk:

support@worksensy.com