Our #1 Priority
Every layer of Omnifly is built on security by design: each organization's data is completely isolated, passwords are protected with the most robust algorithms available, and channel credentials are always stored encrypted.
Security is not a feature added at the end — it is the foundation of every decision we make. From access to monitoring, every component is designed to protect your customers' data.
Secure Authentication
Sessions expire automatically and renew securely. If we detect the use of compromised credentials, all active sessions are immediately closed. Tokens are bound to the device, so they cannot be used from another machine. After several failed login attempts, the account is temporarily locked.
Data Encryption
Passwords are stored using modern hashing algorithms designed to resist brute-force attacks. Channel credentials like WhatsApp and Instagram are always stored encrypted. Sensitive data never appears in system logs.
Complete Isolation per Organization
Each organization's data is completely separated at the database level. No user can access another organization's information, even in the event of a system error. Every operation works exclusively with the data of the corresponding organization.
Role-Based Access Control
Each team member only has access to what they need based on their role: Owner, Administrator, Agent or Bot. Permissions are verified on every action, not just at login. Changing a user's role updates their permissions immediately.
Abuse Protection
The system automatically detects and limits excessive API usage to prevent abuse. The administration panel is only accessible from authorized networks. Incoming messages from external channels are verified before processing to ensure their authenticity.
Continuous Monitoring
We continuously monitor the platform to detect any anomalies before they impact users. We have real-time visibility into the status of all services and proactive alerts to respond quickly to any incident.
Have questions about security?
Our team is available to answer any questions about how we protect your data.
Contact Security