Security & Compliance

Your data security is our top priority

Enterprise Security Standards

Watermarc is built with security at its core. We employ industry-leading practices to protect your data, conversations, and customer information.

  • AES-256 encryption for all data in transit and at rest
  • SOC 2 Type II certification
  • GDPR and CCPA compliant
  • Regular third-party security audits
  • Penetration testing and vulnerability assessments

Meta Policy Compliance

Our platform enforces Meta Platform policies automatically to keep your account safe:

  • 24-hour messaging window enforcement
  • Template message auto-approval validation
  • Automatic opt-in/opt-out compliance
  • Messaging tier management (Tier 1-4)
  • Real-time error detection and recovery
  • Access token security management

Data Protection

We implement multiple layers of protection for your sensitive data:

  • Role-based access control (RBAC)
  • API key rotation and management
  • Session-based authentication
  • IP whitelisting for sensitive operations
  • Automatic backups and disaster recovery
  • Data residency options for compliance requirements

Compliance Certifications

SOC 2 Type II

Independently audited for security, availability, and confidentiality

GDPR Compliant

Full compliance with EU data protection regulations

CCPA Compliant

California Consumer Privacy Act requirements met

HIPAA Ready

Available for healthcare organizations with BAA

Monitoring & Incident Response

We monitor your account 24/7 to detect and prevent security threats:

  • 24/7 security operations center (SOC)
  • Real-time threat detection and alerting
  • Automated incident response procedures
  • Breach notification within 24 hours
  • Detailed security logging and audit trails

Security Questions?

Contact our security team for detailed information about our security practices, compliance certifications, or to schedule a security audit.