Enterprise Security Posture
Security & Trust Built-In
We safeguard your provider credentials and payload data with bank-grade encryption and zero-trust controls.
Data Encryption
All API keys, credentials, and notification variables are encrypted at rest using AES-256 GCM. All API traffic is forced over TLS 1.3.
Credential Vaulting
Third-party provider API keys (SES, Twilio, Meta) are stored in isolated cryptographic key vaults with zero plain-text logging.
Tenant Isolation
Strict multi-tenant workspace partitioning ensures logical separation of customer data, logs, and routing configurations.
Responsible Vulnerability Disclosure
NotifySetu welcomes security researchers and ethical hackers to report vulnerabilities. If you discover a security flaw or potential bug, please report it to us immediately.
security@notifysetu.comPGP Key Available Upon Request • 24-Hour Initial SLA Response