Security

Encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Message content is never stored in plaintext.

Tenant isolation

Each tenant's data is stored in isolated database partitions. Cross-tenant data access is architecturally prevented.

Access controls

All support access to production systems requires 2FA and is logged. Access to message content is disclosed in the audit log.

Responsible disclosure

If you find a security vulnerability, email security@zonnex.in. We will respond within 48 hours and will not pursue legal action against good-faith researchers who follow this policy.