Security Practices

1 Data Encryption

We safeguard your details at every stage:

• In Transit: All HTTP requests, webhook dispatches, and dashboard operations run strictly over TLS 1.3/SSL encryption protocols.
• At Rest: Sensitive databases, SMTP configurations, and Meta API tokens are stored encrypted in our data layers using industry-standard AES-256 encryption.

2 Multi-Organization Isolation

Markuzai supports separate setups for agency client accounts:

Our application implements strict database scoping and query filters to prevent cross-account leaks. Each organization is allocated its own cryptographic workspace boundaries, isolated queue instances, and dedicated configurations.

3 Cloud Infrastructure & Resilience

Our systems are hosted in secure AWS and Google Cloud data centers. Our setups include:

• DDoS mitigation and automated traffic filtering through Cloudflare Enterprise.
• Redundant database clusters with automatic hourly backups.
• Continuous network monitoring and access logs to prevent intrusion attempts.

4 Compliance Certifications

We align our workflows with global industry standards:

• GDPR Ready: We respect all GDPR requirements, enabling user requests for erasure and exports instantly.
• SOC 2 Alignment: Our infrastructure follows SOC 2 security compliance controls.

5 Vulnerability Disclosure

If you discover a security vulnerability in our platform, please report it to our team. We review disclosures within 24 hours.