TRUST

Security & Trust

Last updated 14 July 2026

Midodze (the “Service”) is operated by Benalika Consult Inc, incorporated in British Columbia, Canada. We treat the messages and contacts you entrust to us as sensitive by default. This page summarizes how we protect them.

Architecture & data isolation

The Service runs on Cloudflare’s global network. Every customer is an isolated tenant: each database query is scoped to your tenant identifier in code, so one customer can never read or write another customer’s data. This isolation is enforced by automated tests that run on every change.

Encryption

All traffic is encrypted in transit with TLS. The access tokens we hold to reply on your Facebook, Instagram, and WhatsApp assets are encrypted at rest with AES-GCM before storage, and are never returned in any API response.

Authenticity & abuse controls

Inbound webhooks from Meta are verified with an HMAC signature and are rejected if the signature is missing or invalid (fail-closed). Untrusted comment and message text is fenced before it reaches the AI model to resist prompt-injection, and our sentiment classifier fails closed to notify-only on any unrecognized result rather than replying blindly. Card details are handled entirely by Stripe and never touch our servers.

Backups & recovery

Customer data is backed up on a regular schedule, and our restore procedure has been tested against a scratch database to confirm recoverability. Encryption keys are held separately from the data they protect.

Subprocessors

We rely on the following vetted subprocessors to deliver the Service:

• Cloudflare — Application hosting, edge compute, the tenant database, and bot protection on sign-in and checkout.
• Stripe — Payment processing and subscription billing.
• Anthropic — AI model that classifies messages and drafts replies (default provider).
• OpenAI — Optional AI provider, used only if the subscriber chooses it.
• Google (Gemini) — Optional AI provider, used only if the subscriber chooses it.
• Meta Platforms — Facebook, Instagram, Messenger and WhatsApp messaging APIs the agent replies through.
• Resend — Transactional email (welcome, password and account emails).
• Systeme.io — Optional lead sync into the subscriber's own account, only if the subscriber connects it.
• Discord — Optional notifications to a channel the subscriber nominates, and our own operational alerts.
• Intuit QuickBooks — Our bookkeeping and tax records for subscriptions (billing contact and invoice data only).

Compliance posture

We build to the OWASP Application Security Verification Standard and align our data-handling with GDPR, PIPEDA, and CCPA. We are not currently SOC 2 certified; we will pursue formal certification as our enterprise customers require it. If your organization needs a Data Processing Addendum or a security questionnaire completed, contact us.

Your data rights

You can request export or permanent deletion of your data at any time — see our Data Deletion & Your Rights page. Deletion requests are honored within 30 days and permanently purge your conversations, contact memory, and captured leads.

Reporting a vulnerability

If you believe you have found a security issue, please email contact@midodze.com with the details. We will acknowledge your report and keep you informed as we investigate. Please give us a reasonable opportunity to remediate before any public disclosure.