Data & Security
Last updated 14 June 2026
How we protect your workspace and the data you trust us with.
Tenant isolation
Every workspace is isolated at the database level with row-level security policies, so one organization can never read or write another’s debtors, invoices, campaigns or messages.
Authentication
Sign-in is handled by a managed auth provider with secure, HTTP-only session cookies. Social login (Google, Microsoft, Apple) is supported where enabled.
In transit & at rest
All traffic is served over HTTPS via a global edge network. Uploaded documents are stored in per-workspace, access-controlled storage.
Your channel credentials
Email (SMTP) and WhatsApp credentials you connect are used only to send on your behalf and are scoped to your workspace.
Report an issue
Found something? Email hello@collectara.ae.