We treat the security of your data as a core product requirement — not an afterthought. Here's exactly how we protect your information.
Contact Security TeamInterwow is built with enterprise-grade security practices, applying the security, availability, and confidentiality controls expected of a SOC 2 program. We can walk enterprise customers through our controls under NDA.
In progressInterwow is designed to support GDPR compliance. We act as a Data Processor on behalf of our customers and support data subject rights including access, portability, and erasure. A Data Processing Agreement is available on request.
SupportedInterwow is designed to support CCPA compliance, providing California residents with rights to know, delete, and opt out of the sale of personal information. We do not sell personal data to third parties.
SupportedAll data is encrypted at rest using AES-256. Data in transit is protected with TLS 1.3. Encryption keys are managed with industry-standard key management and automatic rotation policies.
Role-based access control (RBAC) across all internal systems. Single sign-on (SSO) via SAML 2.0 and multi-factor authentication (MFA) enforced for all team members and enterprise accounts.
Ongoing automated vulnerability scanning, with third-party penetration testing planned as we scale. We welcome responsible disclosure — reach our security team at [email protected].
Your data is hosted in our Singapore (Asia-Pacific) data centre. We're happy to discuss specific data-location needs with enterprise customers.
24/7 automated monitoring via PagerDuty with defined escalation procedures. Documented incident response plan with RTO < 4 hours. Affected customers notified within 72 hours per GDPR requirements.
Full audit trail of all account activity including logins, settings changes, data exports, and API calls. Logs are immutable, retained for 12 months, and exportable for your own SIEM.
Security and privacy are not bolt-ons at Interwow — they're designed in from the start. Every new feature goes through a privacy impact assessment before it ships.
We collect only the data strictly necessary for the feature to function. No speculative data collection "just in case it's useful later."
Set your own retention periods per data type. Data is automatically and irreversibly deleted when retention windows expire.
Built-in consent controls let you respect your users' preferences. Interwow can suppress recording or tracking for users who opt out.
Process user deletion requests through our API or dashboard. Data is purged from all systems including backups within 30 days.
Need a custom Data Processing Agreement, a dedicated security review, or custom data retention policies? Our enterprise team will work through your requirements with you.
