Security
Security and data protection at Risponse
How your team controls who sees what in your WhatsApp inbox, and how you keep a copy of your data. Every control on this page is described step by step in the Risponse docs.
Last reviewed
Controls
Built-in controls for teams that share an inbox
Control who sees what
Access starts closed. A new member sees nothing until a chat is shared with them.
- Two roles. Admins see every chat and group on the connected numbers and manage settings. Members see only the chats they are given access to. Docs
- Access through labels. A member sees a chat only while it carries one of their labels. Remove the label and the chat leaves their inbox. Docs
- A visible access list. Each chat shows, at the top right, everyone who can see it. Docs
- Admins add numbers. Only admins can connect a WhatsApp number to the workspace. Docs
Keep customer details private
Agents get what they need to help, and nothing more.
- Number masking. Hide customer phone numbers from agents, such as contractors or a call centre. They still see names and the full chat and reply as normal. Masking cannot stop someone noting a number a customer types in a message, so use it with access controls, not instead of them. Docs
- Media privacy. Turn it on and pick how long file links stay valid. Signed-in users still open photos, videos, voice notes and documents as normal. Outside the app, a file link then works only until it expires, including links copied or sent to other tools. Docs
- Private notes. Notes stay inside the chat. Only your team can read them, and they are never sent to the customer. Docs
Know who did what
A clear record when you need to review the work.
Your data, your copy
Depending on your plan, take your records with you whenever you need them.
- Exports. Export chats and group members, messages, private notes, tickets, connected numbers and activity history, with your own date range and filters. Most files are CSV. Docs
- Handle exports with care. Exports can contain phone numbers and messages. The docs advise letting only admins export and treating every file as private. Docs
Connections you approve
Other tools reach your inbox only when you connect them.
- Integrations. HubSpot, Zoho CRM, Zoho Desk and Google Sheets connect when you sign in to that tool and approve access. Freshdesk uses your Freshdesk domain and API key. Docs
- Zapier keys. Zapier uses an API key you create in Risponse. Treat it like a password: anyone with the key can reach your workspace data. Docs
- AI apps through MCP. An AI app must sign in to Risponse, and you choose the workspace and the numbers it may use. Remove the connector to stop access. Docs
- AI agent tools. Switch each built-in tool on or off, and review every custom tool call with its inputs and results. Docs
Your numbers
Keep your WhatsApp numbers in good standing
WhatsApp decides when a number is limited or banned, and no tool can guarantee it never happens. Messaging people who asked to hear from you, warming up new numbers and keeping outreach on its own number all lower the risk.
The docs explain these best practices and how to warm up a new number.
Report an issue
Found a security problem? Tell us
Email info@risponse.com with the subject “Security report”. Describe what you found, the steps to reproduce it and the page or feature involved. Please do not access other people's data or disrupt the service while testing.
How Risponse handles personal data is set out in the Privacy Policy. For other questions, see Contact.