Security & trust

Your customer data,
handled with care.

Bozuro stores your contacts, orders and events encrypted in transit and at rest, isolated to your workspace. You own every record — export or delete it any time. Here's exactly how we protect it, and what's still on our roadmap.

  • Encrypted in transit & at rest
  • You own & can export your data
  • Built-in consent & opt-out
Marketer reviewing her customer data securely on a laptop
AES-256 Encrypted at rest
TLS 1.2+ in transit
Data security

Encrypted on the way in, encrypted at rest.

Every connection to Bozuro runs over HTTPS with modern TLS. Once your contacts, orders and events land, they're stored encrypted and isolated to your workspace — one account can never see another's data.

Your store & website
TLS 1.2+
BozuroAES-256 at rest
  • In transit TLS 1.2+ / HTTPS
  • At rest AES-256
  • Tenant isolation Per-workspace, row-level
  • Passwords Hashed, never plaintext
  • Customer data use Never sold or shared

We never sell or share your customer data, and we don't use it to train shared models.

Sending compliance

Consent in, opt-out always honored.

Email and SMS come with rules. Bozuro builds the consent lifecycle into every form, list and send — so honoring an opt-out isn't something you have to remember to do. The tools below help you stay on the right side of CAN-SPAM and TCPA.

CAN-SPAM TCPA Opt-in

You remain the sender of record. Bozuro provides the controls — not legal advice; check the rules that apply to your audience.

  1. 1

    Capture consent

    Forms record opt-in for email and SMS separately, with single or double opt-in on lists.

  2. 2

    Track subscribe status

    Every contact carries a live subscribe status you can see and segment on.

  3. 3

    Honor unsubscribe & STOP

    One-click unsubscribe on email and STOP on SMS are built in to every message.

  4. 4

    Suppress automatically

    Opted-out and hard-bounced contacts are excluded from future sends — no manual list scrubbing.

Deliverability & reputation

Authenticated mail that actually lands.

Bozuro walks you through authenticating your sending domain and protects your reputation on every send — so your campaigns reach the inbox, not the spam folder.

SPF

Sender Policy Framework

Authorizes Bozuro to send on behalf of your domain.

DKIM

DomainKeys signing

Cryptographically signs each message so receivers can trust it.

DMARC

Alignment policy

Tells inbox providers how to treat mail that fails the checks above.

Custom senders & SMTP

Send from your own verified addresses, with a test send before every launch.

Bounce check before send

Invalid and risky addresses are caught up front so they never hurt your reputation.

Engagement-aware sending

Subscribe status and bounce history keep your sends to people who actually want them.

Account & access

Who gets in, and with what.

  • Role-based team access Invite teammates and assign a role to control what each person can do.
  • Scoped API keys Issue keys limited to a scope, and revoke any of them instantly.
  • Password controls Change your password any time; we store it hashed, never in plain text.

RoadmapSSO / SAML and multi-factor authentication are on our roadmap — talk to sales about timing for your team.

You own your data

In, out, or gone — your call.

  • Import any time Bring contacts in by CSV or a 1-click store sync — no lock-in.
  • Export any time Download contacts, segments and form submissions to CSV whenever you want.
  • Delete on request Erase a contact and their order/event history when you need to.
  • It stays yours We never sell or share your customer data with anyone.
Straight talk

What we have, and what we don't — yet.

We'd rather tell you plainly than show a badge we haven't earned. Here's exactly where we stand.

On the roadmap

Certifications

Formal certifications like SOC 2 are on our roadmap. Until they're earned, we won't show a badge — and we're happy to walk your security team through how we work today.

Talk to sales
On request

Sub-processors

The vendors that help us deliver email and SMS are available on request — just ask and we'll share the current list.

Request the list
Always open

Responsible disclosure

Found a security issue? Email us and we'll work with you to confirm and fix it. We appreciate every report.

Report to [email protected]
Start today

Marketing your customers
can trust.

Connect your store and start sending email and SMS that respects consent, lands in the inbox, and keeps your data yours. Free to start, no credit card — and our team is one message away if your security review needs more.