SECURITY
Held in confidence. Proven on demand.
Your customers' conversations are private, permanent and accountable from the second they arrive. Not as a setting somebody remembered to switch on, but as the shape of the thing itself.
3 yearsLonger than the conversations it describes.
Access log
All numbers · last 7 days- 2026-08-28 15:02:11
Opened Chris Delgado's conversation with Laura Bennett
Daniel Reyes · Director · Discount dispute
- 2026-08-28 09:41:03
Searched Chris Delgado's conversations for “discount”
Megan Foster · Sales Manager · Weekly review
- 2026-08-26 08:15:44
Exported the weekly response report
Daniel Reyes · Director · Board pack
- 2026-08-25 17:30:09
Viewed one attachment on Derek Owens' number
Alan Whitfield · Auditor · Q3 audit sample
Each row is written before the data is returned. Nobody can edit a row, delete one, or switch the log off.
Written before the data appears, never after
WAOversight keeps every customer's archive sealed from every other, records every time a conversation is opened, and makes a captured message impossible to alter afterwards. Retention is 12 months on every plan. Nobody, our own team included, can change what your archive says once it has been written.
01 — THE SHORT VERSION
Three numbers that decide the rest
0
People who can alter a captured message. Your managers, your admins and our engineers are all on that list.
12 months
Retention on every plan, set by you. Never a lever we price against.
3 years
How long the record of who read what is kept, outliving the messages it describes.
02 — SIX COMMITMENTS
What you are actually being promised
Each of these is written as something a person can or cannot do, because that is the form you can hold us to, and the form your own security reviewer will test.
Your archive is yours alone
No other customer can reach a single message of yours. That separation is held by the storage itself, not by our code remembering to ask, so it would still stand on a day we shipped a mistake. It is the one wall we built to survive our own errors.
Nothing here can be quietly changed
A message is sealed the moment it arrives. If someone deletes or edits it on WhatsApp afterwards, the original stays exactly as it was and the change is recorded beside it. There is no button, no setting and no support request that rewrites what your archive already says. Not for your managers, and not for us.
Every look is on the record
Opening a conversation, running a search, viewing an attachment and downloading an export are each written down before anything appears on screen. If that entry cannot be written, the information is not shown. Nothing is sampled and nothing is left to a background queue that might catch up later.
The keys to your numbers stay out of reach
What keeps a company number linked is the most sensitive thing we hold, so it is kept apart from the part of this product a browser can talk to. The dashboard cannot read it under any circumstances, because it was never given the ability to in the first place.
We cannot message your customers
There is no way to send from your numbers here. Not switched off, not held behind a permission: absent. Whatever were to happen to your account or to ours, nothing in this product can put words in a rep's mouth or reach a customer of yours. We watch, and that is all we are built to do.
Your archive proves itself
What you export carries its own proof that it has not been touched since the day it was captured, and that proof is yours to check. You do not have to take our word for it, which matters, because the people you may one day have to show it to will not take our word for it either.
03 — AI ASSESSMENTS
What leaves for the AI, and what never does.
AI assessments are off until a workspace owner switches them on and accepts a disclosure of what is sent and to whom. This is that disclosure, in full.
Who reads it
DeepSeek, as a sub-processor under the data processing agreement each workspace signs, which sets out where it processes data. DeepSeek documents no zero-retention commitment for API requests, so we do not claim one.
Which conversations
Scheduled readings cover only threads your CRM matches to a customer, never broadcast lists, and only when something may need a manager. A manager can also ask for a summary of a conversation they can already open.
What is removed first
Before a scheduled reading or Assess now, phone numbers, email addresses, links and ID numbers are replaced with placeholders, and each message is labeled only rep or customer. Names typed inside a message are not removed. A summary a manager asks for is sent as the thread was written.
What is never sent
Voice notes, images, documents and calls. The AI sees that one was sent, not what it contained.
On the record
Every reading writes an access log row before the thread is read. If the row cannot be written, the reading does not happen.
What comes back cannot act
A finding whose quote is not in the message it names is dropped. Severity and notifications are set by code, and no email ever contains message text.
04 — THE HARDEST TEST
A message deleted on WhatsApp is still here.
This is the moment that decides whether an archive is worth having. A rep promises a discount they should not have promised, thinks better of it, and deletes the message from the conversation. On the customer's phone it is gone. On yours it is gone.
In your archive it is exactly where it was, with the time it was written and the time it was withdrawn recorded beside it. Nothing about that is a setting, a plan or a preference. It is the reason the record is worth keeping at all.
Deleted and edited messages are preserved on every plan, from the first number you link.
That's a bit more than I expected. Any discount?
Deleted by rep · sent 14:32 · deleted 14:36
I can do a special 30% off, $62.30. Please don't mention it to my manager 😄
Still in your archive
05 — RESPONSIBLE DISCLOSURE
Found something? We would rather hear it from you.
Write to [email protected]. You will hear back within two working days with what we are doing about it, and we will credit you by name if you would like the credit.
We will not threaten you, and we will not ask you to stay quiet. If a finding touches customer data, the customers it touches hear from us directly, and the reliability page sets out what we publish and how it is measured.
Last reviewed 2026-09-17 · updated whenever an answer changes, not once a year.
06 — THE QUESTIONS THAT ACTUALLY GET ASKED
What buyers ask us before they sign
Who inside my company can see what?
You decide, by team and by role. A manager sees the reps they are responsible for and nothing beyond them, unless you choose to give them more. An owner sees the whole workspace, and can appoint an auditor who reads the record of who opened what.
Can your team read our conversations?
Access to your archive is restricted and recorded the same way access by your own managers is. The record of who opened what is kept for 3 years, outliving the messages themselves, and it is yours to read. Nobody can edit an entry in it or remove one.
What happens when a rep deletes a message?
Nothing leaves your archive. The original stays exactly as it was written, and the deletion is recorded next to it with the time it happened. This is the single most common reason customers buy this product, so it is the thing we protect hardest.
Is this legal to run on my team?
On company-owned numbers with written notice to staff, in most places yes. We give you the policy and the acknowledgement form to get it signed off. We are not lawyers, and what we hand you is the paperwork your HR needs rather than an opinion.
Will my reps know it is running?
Yes, and that is the point. Nothing is installed on anyone's phone, there is no hidden mode, and the whole arrangement is announced to the team. A tool that hides from the person it watches is a different kind of product, and one we chose not to build.
How long do you keep our conversations?
12 months on every plan, and you set it. Retention is never a lever we price against, because charging you to remember longer would make the archive a subscription to your own history rather than a record you own.
Send us your security questionnaire.
We would rather answer it now than during an incident. Send it over and we will fill it in, including the questions where the honest answer is no.
WAOversight is an independent product and is not affiliated with or endorsed by WhatsApp or Meta.