Your data is our responsibility
Social Hub handles competitive intelligence, customer conversations, and financial transactions. Security is built into every layer: from encryption to access controls to infrastructure.
Encrypted
Account tokens
HTTPS
Transport security
Daily
Database backups
Per team
Data scoping
Four layers of protection
Encryption
- HTTPS enforced on all connections
- OAuth tokens encrypted with AES-256-CBC application keys
- HTTPS for API calls to Meta, AI providers, Apify and MyFatoorah
Infrastructure
- Dedicated server
- Ubuntu 24.04 LTS
- UFW host firewall
- Nginx reverse proxy
- Automated daily database backups
Application Security
- CSRF protection on all state-changing requests
- SQL injection prevention via parameterized queries for all user input
- XSS prevention through Vue.js auto-escaping and HTML sanitization where rich content is shown
- Rate limiting on auth endpoints, API routes, and forms
- Server-side file upload validation, MIME type, extension, and size
Access Controls
- Role-based access for team owners, members and agents
- Multi-tenant design, data scoped to each team
- Branch-level scoping, agents restricted to specific departments
- Laravel Sanctum token-based API authentication
- Configurable session lifetimes with secure cookie attributes
Every integration vetted
Meta (Facebook / Instagram)
OAuth 2.0 with scoped permissions. Token validity is checked daily and tokens are deleted from our database when an account is disconnected. Webhook signatures verified on every callback.
WhatsApp Business API
Messaging through Meta's official WhatsApp Cloud API.
AI Engine
API-key authenticated. Used for AI features such as sentiment analysis, caption analysis and the chat assistant.
MyFatoorah
PCI-DSS compliant payment gateway. Credit card numbers never touch our servers: all payment processing on MyFatoorah infrastructure.
Apify
Public data collection platform used for social media, retail and restaurant data. API-key authenticated.
We keep only what's needed
Incident Response
- 1Detection through queue monitoring, application logs and platform health checks
- 2Containment and assessment
- 3Notifying affected customers of confirmed breaches
- 4Root cause analysis and remediation
- 5Post-incident review and preventive measures
Report a Vulnerability
If you discover a security vulnerability in Social Hub, please report it to us. We take all reports seriously.
support@social-hub.netLast updated: June 2026