Security & Infrastructure Trust Center

Architected for Uncompromising Security

From edge sandboxing to encrypted WhatsApp token management, discover how MANZA protects your business, team, and customer data across our servers.

TLS 1.3 / HTTPS Strict EncryptionMulti-Tenant Data Ring-FencingAutomated Bot & Spam Interception

Tenant Ring-Fencing

Isolated Edge Sandboxing

Every workspace operates within strict multi-tenant boundaries. Website projects, CRM contact records, custom templates, and funnel steps are partitioned at the database layer with deterministic keys on our dedicated edge network.

Row-level workspace ID enforcement across all database queries and transactions

Deterministic edge storage keys ensuring complete asset partition between organizations

Isolated subdomain and subpath namespace routing for high-traffic agency accounts

Threat Mitigation

DDoS & Brute-Force Rate Limiting

Dynamic sliding-window rate limiters defend your websites and authentication routes from automated credential stuffing, high-volume brute forcing, and resource exhaustion attacks.

Sliding-window IP and token throttling across login, registration, and OTP endpoints

Strict upload velocity restrictions defending edge ingestion pipelines

Adaptive 429 Too Many Requests response protocols with standardized retry headers

Spam Defense

Bot Protection & Dual Honeypots

Public lead capture forms and landing page funnels utilize dual invisible honeypots (hp_field_check and website_url_check) to silently intercept bot-generated spam submissions.

Invisible form fields completely transparent to human users but filled by automated crawlers

Silent 200 OK discard protocol preventing spam contacts from polluting your CRM or trigger sequences

Optional Google reCAPTCHA v3 score-based verification for high-risk lead funnels

Server-Only Isolation

Zero-Knowledge Secret Boundaries

All database connection strings, BYO custom SMTP passwords, and official Meta WhatsApp Cloud API tokens are cryptographically locked behind Next.js server-only boundaries.

Server-only imports preventing cryptographic keys and tokens from ever compiling into client bundles

Automatic serialization sanitizers stripping password hashes and tokens before returning user payloads

AES-256 encryption at rest for third-party integration credentials and access tokens

Compliance & Data Privacy Standards

MANZA adheres to strict data minimization and regulatory standards under the Digital Personal Data Protection (DPDP) Act and international privacy frameworks. We never sell customer contact lists, inspect uploaded project contents for advertising purposes, or expose workspace infrastructure credentials.

Read our Privacy Policy →•Review Terms of Service →