Notifyer by WhatsAble is committed to data protection and GDPR-aligned practices. Our infrastructure is built on SOC 2 Type 2 and ISO 27001–certified providers.
Notifyer by WhatsAble (operated by Automazing, LLC) processes business communications and customer data on behalf of our clients. We take that responsibility seriously and maintain security, privacy, and compliance practices appropriate for business buyers, procurement teams, and auditors.
This page describes our operational security posture — infrastructure certifications, subprocessors, incident handling, and how to request security documentation. For data-subject rights and lawful-basis disclosures, see our Privacy Policy. For contractual terms, see our Terms of Service.
Core application data and APIs run on independently audited infrastructure.
Our primary backend — including data storage, business logic, and API handling — is built on Xano, a platform that maintains SOC 2 Type 2 and ISO 27001 certifications and a documented GDPR compliance program. Infrastructure-level monitoring, access controls, and security operations for this layer are managed by Xano in accordance with their security program.
Application frontends are hosted on Vercel. WhatsApp message delivery is handled through Meta's WhatsApp Business Platform (WhatsApp Cloud API), which operates under Meta's data processing terms for technology providers.
All client–server communication uses TLS. API credentials and tokens are transmitted over encrypted channels.
Personally identifiable information is encrypted at rest on our backend infrastructure, in line with provider security standards.
Production access is restricted to authorized personnel on a need-to-know basis. Customer accounts are isolated by authentication and authorization controls.
We follow industry-standard practices for credential management, environment separation, and dependency hygiene in our application layer.
Independent attestations covering our core infrastructure and operational practices.
Our backend provider has completed a comprehensive SOC 2 Type II audit covering security, availability, and confidentiality controls. Summary documentation is available via the Xano Security Center. Full SOC 2 reports are available to enterprise customers upon request through our security contact.
Our backend infrastructure is covered under ISO 27001:2022 certification for information security management. Details and certificate references are published in the Xano Security Center.
We process personal data in accordance with applicable data protection law, including the GDPR where it applies. Lawful basis, data-subject rights, and collection disclosures are documented in our Privacy Policy. Data processing agreements are available on request at team@whatsable.app.
As a WhatsApp Business Platform technology provider, we maintain data protection and security practices in accordance with Meta's requirements for partners integrating with the WhatsApp Cloud API.
Vendors that process data on our behalf to deliver the Notifyer service.
We engage the following categories of subprocessors. Where a vendor publishes its own privacy or security documentation, we recommend reviewing those materials for full detail.
Customers may connect third-party automation platforms (e.g. Make, Zapier, n8n, monday.com). Data shared with those platforms is governed by the customer's configuration and each platform's own terms and privacy policies.
How we detect, respond to, and communicate about security events.
Customer account data, message metadata, and integration configuration are stored on our certified backend infrastructure. Message content transits through Meta's WhatsApp Cloud API for delivery. Exact processing locations may depend on provider regions and customer configuration; we can provide further detail in security questionnaires on request.
Backups and disaster recovery for core infrastructure are managed by our backend provider in accordance with their certified controls. Upon service termination or a verified deletion request, customer data is removed from our systems within our published retention windows unless a longer period is required by law.
For account or data deletion, use our data deletion request form or email team@whatsable.app.
For SOC 2 summaries, subprocessors lists, data processing agreements, or responses to vendor security assessments, our team will respond as promptly as possible.
Whatsable
