Trust Center

We operate with
audit by default.

Every action a Xplouse agent runs is signed in an immutable audit ledger. Every integration, every data point and every decision is traceable and exportable.

Security

  1. Encryption in transit (TLS 1.3) and at rest (AES-256).

  2. Role-based access control (RBAC) with enforced MFA.

  3. Continuous monitoring of access patterns and anomalies.

  4. Quarterly rotation of credentials and secrets.

Compliance

  • Colombia Law 1581/2012. Personal Data Protection.
  • Decree 1377/2013. Habeas Data regulations.
  • GDPR for EU citizens' data.
  • LGPD for Brazilian citizens' data.
  • SARLAFT compatible for Colombian financial sector.

Sub-processors

Google Cloud Platform
Hosting and infrastructure.
Vertex AI / Gemini
Foundation language models.
Anthropic Claude
Complementary language models.
Meta Business
Official WhatsApp Cloud API.
Resend
Transactional email delivery.
Supabase
Encrypted operational database.

Data residency

  • Regional deployments in us-east, us-south and europe-west.
  • Customer chooses jurisdiction at onboarding.
  • Data never leaves the agreed region without explicit consent.
  • Encrypted backups stay in the same region; no cross-border replicas.

Report a vulnerability or request a DPA at Xplouselab@gmail.com