Encryption everywhere
TLS 1.3 for every request in transit and AES-256 for every byte at rest. Encryption keys rotated automatically.
Security & Compliance
Security you can hand to your compliance team
Notifyr is engineered for regulated industries. Encryption everywhere, isolated tenancy, GDPR and DPDP compliance, SOC 2 Type II — plus SSO, audit logs and scoped API keys for enterprise-grade control.
Pillars
How we secure your data
Scoped API keys
Every API key is scoped to a project with read/write/send permissions, rate limits and optional IP allowlists.
Isolated tenancy
Every project is logically isolated with row-level tenancy checks enforced at the database layer.
Data residency
Primary storage in Mumbai (ap-south-1). EU and US residency options for Scale plans.
SSO & audit logs
SAML/SSO with Okta, Azure AD and Google Workspace. Every dashboard action recorded in audit logs.
Alerts & anomaly detection
Automatic alerts for unusual send volumes, credential misuse and suspicious login patterns.
Certifications
Standards we hold ourselves to
SOC 2 Type II
Annual SOC 2 Type II audit. Report available under NDA.
GDPR + DPDP
Full compliance with EU GDPR and India's DPDP Act 2023. Signed DPA available.
ISO 27001 (in progress)
ISO 27001 certification underway, targeted for completion in 2026.
Responsible disclosure
We take security reports seriously. If you believe you've found a vulnerability, please email security@notifyr.in with steps to reproduce. We acknowledge every report within 24 hours and pay bounties for qualifying issues under our bug bounty programme.
Ready to send your first campaign?
Create a free account, connect a provider and send your first 1,000 emails in under 5 minutes.