Security
Security at Wuber
Your data and your customers data is protected by enterprise-grade security practices.
Encryption
All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Database backups are also encrypted.
Tenant isolation
Every workspace is fully isolated at the database level. No tenant can access another tenants data under any circumstances.
Audit logging
Every action taken in the platform is recorded in an immutable audit log. Logs cannot be altered or deleted.
Access control
Role-based access control with custom permissions. Multi-factor authentication available. Session management with device tracking.
Incident response
We have a documented incident response plan. Security incidents are disclosed to affected customers within 72 hours.
Compliance
NDPR compliant. SOC 2 Type II audit in progress. All subprocessors are vetted for security and compliance.
Report a vulnerability
We take security reports seriously. If you discover a vulnerability, please disclose it responsibly by emailing contact@wuber.com.ng. We aim to acknowledge reports within 24 hours and resolve critical issues within 7 days.
Please do not publicly disclose the vulnerability until we have had the opportunity to address it. We do not currently offer a bug bounty program but we will acknowledge responsible disclosures.