Skip to content

Security

Built so a mistake can't go out.

Xporta handles your mailbox and your customer list. Here is how that is protected.

  • Approval before anything leaves

    Emails, campaigns and credit spends are executed only by typed tools after you approve them. The AI drafts; it cannot send, charge or change records on its own.

  • Your workspace is yours alone

    Every business record is tied to your workspace and every query is filtered by it. Your buyers, conversations and catalogues are never visible to another customer.

  • Your mailbox, LinkedIn and WhatsApp

    Access tokens for every connected account are stored encrypted. Xporta uses them only to show your buyer conversations, draft replies for your approval, and send what you approve — nothing else.

  • Credits that fail safe

    Credits are reserved before work, committed on success and released on every failure path. Failed work consumes nothing.

  • Secrets stay server-side

    Keys and credentials live in the hosting environment only — never in the browser, never in logs, never in the codebase.

  • Report an issue

    Found something? Write to us and a person will reply. We fix security reports first.

Security contact: friends@xporta.co