Skip to content
Waseet

Security & privacy

Your clients' data is your brokerage's capital. Here's how we protect it.

  • Full tenant isolation

    Every record belongs to your brokerage's workspace, and every query passes through a layer that enforces your workspace ID and rejects any mismatch.

  • Encryption in transit

    All traffic uses HTTPS (TLS), and session cookies are secure and unreadable from JavaScript.

  • Hashed passwords and tokens

    Passwords are stored as bcrypt hashes, and session and invitation tokens only as SHA-256 fingerprints.

  • Daily backups

    The database is backed up daily, and documents are kept in separate cloud storage.

  • Role-based access

    Five roles with defined permissions; agents only see their own clients and policies.

  • Audit log

    Every create, update and delete is recorded with the user and time, reviewable by owners and managers.

Found a security issue?

We appreciate responsible disclosure. Contact us and we'll respond quickly.

Contact