Security at Ogasocial
Your team has access to your clients’ brands, so we take protecting that access seriously. These are the security measures in place today. Each one is covered by automated tests.
Security measures
No software is perfectly secure. This is what we do to protect your data.
Separate workspaces
Every record belongs to one workspace. Requests for another workspace’s data return “not found”.
Role-based access
Owners, admins, managers, editors, analysts and clients each have their own permissions, and you can limit members to the clients they work on.
Two-factor sign-in
Time-based codes from an authenticator app, with recovery codes. Spending ad money always requires it.
Tokens encrypted at rest
Platform connections, two-factor secrets and billing references are encrypted in the database.
Permanent audit log
Sign-ins, role changes, approvals, publishing and spending decisions are recorded and can’t be edited.
Rate limits on sign-in
Sign-in locks after repeated failures, and password resets and portal links are rate limited.
Strict browser headers
A content security policy with per-request nonces, no framing by other sites and secure cookies.
Safe use of AI
Email addresses and phone numbers are removed from briefs before they’re sent to the AI provider, and client content is never treated as instructions.
Uploads checked
Files are checked by their content, not just their name, and images are re-encoded to strip hidden data.
Verified payments only
Billing webhooks must carry a valid signature, and a plan only changes once the payment is confirmed with the payment provider (Paystack or Bachs).
Access based on role
A writer assigned to two clients only sees those two clients. An analyst can read reports but can’t approve ad spend. Clients only see their own portal.
A record of every action
The audit log records who approved a post, who launched a campaign and who changed a role. No one can edit it afterwards, including us.
Found a problem?
If you think you’ve found a security issue, please contact us with the details and we’ll look into it straight away.
Try Ogasocial for free
The Free plan includes one client. No credit card required. Book a demo and our team will reply by email.