Security at Patriy
We take the security of your data and your customers’ conversations extremely seriously.
Certifications & Compliance
Security controls
Encryption in transit, RBAC, audit logs, webhook signatures and tenant isolation. Formal SOC 2 certification is not claimed until a report exists.
GDPR Compliant
Full adherence to EU data protection standards with strong data subject rights support.
CCPA Compliant
California Consumer Privacy Act compliance and user rights protection.
ISO 27001
Pursuing formal ISO 27001 certification in 2026.
Encryption & Data Protection
🔒 Data in Transit
All communication between your devices and Patriy uses industry-standard TLS 1.3 encryption. Provider-managed channels (such as WhatsApp) use the provider's own message encryption.
🗄️ Data at Rest
Sensitive data, including conversations and CRM records, is encrypted using AES-256. Database-level encryption is enabled by default.
Infrastructure Security
99.9% uptime target
Cloudflare-powered edge hosting with DDoS protection.
DDoS Protection
Enterprise-grade protection powered by Cloudflare.
24/7 Monitoring
Real-time threat detection and incident response.
Access Control & Authentication
Strong Authentication
- Secure password hashing with PBKDF2 (210,000 iterations) in Convex — passwords never leave the backend
- Session tokens stored as SHA-256 hashes, with per-session revoke
Role-Based Access
Team members can be assigned roles with granular permissions (Admin, Manager, Agent, Viewer).
Incident Response
In the unlikely event of a security incident, we follow a structured response process:
- Immediate containment within hours
- Thorough investigation and root cause analysis
- Notification to affected customers within 72 hours (or sooner if required by law)
- Status updates shared with affected customers
- Implementation of preventive measures
Responsible Disclosure
We value security researchers and encourage responsible disclosure of vulnerabilities.
Report security issues to: hello@patriy.com
We commit to acknowledging your report within 24 hours and working with you on a timely fix.