How Respontra handles access and data
These are product controls implemented in Respontra. They are not a claim of external certification or European-only hosting.
Workspace access
Verified accounts and workspace membership protect application data. Owners manage team members and configuration; agents work on conversations and appointments. Platform administration is separately restricted and does not silently impersonate customers.
Private files and credentials
Attachments use private storage and temporary download links. Meta access tokens are encrypted server-side. Webhook signatures are checked before events are processed.
Permission and account choices
Permission evidence and opt-outs are recorded with contacts. Recovery sends recheck eligibility. Owners can request deletion, export workspace data and disconnect WhatsApp without deleting Meta business assets.
Hosting and service providers
Respontra uses Vercel, Supabase, Trigger.dev, Paddle, Resend and Meta services. Deployment regions and provider agreements must be confirmed for the published service. European company comparisons do not establish Respontra data residency or compliance.