Security at NX CRM
We build security directly into our application layer to protect your customer conversations, contact lists, and API credentials.
PostgreSQL Row Level Security (RLS)
Strict multi-tenant database policies ensure workspace members can only access records belonging to their authenticated account.
AES-256-GCM Token Encryption
WhatsApp System User access tokens and third-party API credentials are symmetrically encrypted in the database before storage.
HMAC Webhook Signature Verification
Every inbound payload from Meta (graph.facebook.com) and Razorpay is verified against a cryptographic SHA-256 digest to prevent spoofing.
Server-Side Meta API Calls
Meta app secrets and WhatsApp tokens are never exposed to client browsers. All messaging operations occur server-side.
Granular Role-Based Access Controls (RBAC)
Fine-grained permissions: Owner (billing & full control), Admin (config & team), Agent (inbox & deals), and Viewer (read-only).
Baseline OWASP Hardening & CSP
Enforced HSTS, X-Content-Type-Options (nosniff), X-Frame-Options (DENY), strict Referrer-Policy, and restricted Permissions-Policy.