Security & Compliance

Last updated: October 26, 2026

This page describes how TAM Inbox actually protects your data today. We haven’t pursued a formal third-party certification (e.g. SOC 2 or ISO 27001) yet - this is a plain description of our current practices, not an audited attestation. If your organization needs a specific certification for procurement, contact us and we’ll let you know where we stand.

Data encryption

API keys, WhatsApp Business Account access tokens, and other sensitive credentials are encrypted at rest and are never exposed to the browser - our API responses strip secret values before returning connection details to the client. All traffic between your browser and TAM Inbox is encrypted in transit (HTTPS/TLS).

Tenant isolation

TAM Inbox is multi-tenant software: every database query is scoped to your organization’s account, so one customer can never see another’s contacts, conversations, or campaigns. Within an organization, team members with the Agent role only see conversations assigned to them, not your entire inbox - access control enforced on every request, not just hidden in the UI.

Infrastructure and backups

• TAM Inbox runs on infrastructure we operate and control directly, not a shared third-party platform.
• Automated daily database backups, rotated and kept off-site, run before every deployment with built-in pre-checks so a deploy never proceeds against low disk space or mid-flight campaign sends.
• Deployments are scripted and repeatable, reducing the risk of manual deployment errors.

WhatsApp / Meta authorization

TAM Inbox connects to the official WhatsApp Business Platform (Cloud API) as an authorized Meta Tech Provider / Business Solution Provider - not an unofficial or reverse-engineered integration.

Data handling & GDPR

We process contact phone numbers, message content, and campaign data only as directed by you (the data controller) to operate the Service - see our Privacy Policy for the full detail on what’s collected and why. For customers who need a formal Data Processing Agreement for their own compliance records, a template is available to download below.

Download our Data Processing Agreement (DPA) template →

Reporting a security issue

If you believe you’ve found a security vulnerability in TAM Inbox, please report it to taminbox@tamcons.com rather than disclosing it publicly - we’ll acknowledge and investigate promptly.

Questions

For anything else about our security or compliance posture, contact taminbox@tamcons.com or via our contact form.