Built with tenant isolation from day one
Oxigrid is multi-tenant by design — here's how we keep every workspace's data separate and every credential protected.
How we protect your data
Credentials encrypted at rest
Access and refresh tokens for every connected integration (Meta, Google, WhatsApp) are encrypted at rest, never stored as plain text.
Strict tenant isolation
Every workspace's leads, conversations and integrations are scoped to that company only — no data is ever visible across tenants.
Verified webhook ingestion
Data coming in from Meta and WhatsApp webhooks is de-duplicated and verified against a stable idempotency key, so retried or replayed events can't create duplicate leads or messages.
Separated production & development
Our production Meta integration runs on its own dedicated app and webhook endpoint, kept fully separate from development, so local testing never touches live customer data.
On formal certification:Oxigrid is an early-stage product and does not yet hold formal certifications like SOC 2 or ISO 27001. If your organization requires those for procurement, get in touch — we're happy to talk through our current practices and roadmap in detail.