Security & trust
Senpede moves customer data across channels, providers and organizations. Here's what actually protects it, at the infrastructure level and in how the product is built, not a generic compliance checklist.
Authentication
- Passwords are hashed with argon2id, using OWASP-recommended parameters, never stored or logged in plain text.
- Access tokens are short-lived JWTs; refresh tokens are opaque and rotated on every use.
- Reusing a refresh token that's already been rotated or revoked immediately revokes every session on the account, not just that one, since it's treated as a signal of token theft.
- Login failures return one generic response regardless of whether the email exists, with timing equalized for unknown emails, so the login endpoint can't be used to enumerate accounts.
Data protection
Encrypted credentials
Provider credentials for your messaging channels (SMS, email, WhatsApp and the rest) are encrypted at rest with AES-256-GCM, not stored as plain text in the database.
Tenant isolation at the data layer
Every tenant-owned query is scoped to your organization in the repository layer itself, not just checked in the UI or a controller. There's no code path a request can take that returns another organization's data.
Signed webhooks
Outbound webhook deliveries are signed with an HMAC-SHA256 signature over the timestamp and payload, so the receiving system can verify a request actually came from Senpede and hasn’t been tampered with.
Rate limiting
Public API keys are rate-limited per key (120 requests/minute by default, configurable up to 6,000), so one integration bug or a leaked key can’t take down the platform for everyone else.
Compliance-friendly by design
For teams in banking, insurance and other regulated industries.
Consent and suppression management
A customer-facing consent portal and an organization-wide suppression list let you honor opt-outs and do-not-contact requests consistently across every channel, instead of tracking it per provider.
Approval workflows
Message templates move through a review step before they can be used in a live campaign, so a second person can sign off before anything reaches a customer.
Need data to stay inside your own infrastructure entirely? Senpede also runs as a dedicated cloud deployment or fully on-premise. Reach out from the pricing section to talk through what that looks like.
Responsible disclosure
If you believe you've found a security vulnerability in Senpede, please get in touch before disclosing it publicly. We investigate every report we receive.