Skip to content

How SmartChat protects the servers.

SmartChat protects the servers that store your contacts and WhatsApp conversations, and checks every file and every message from Meta.

Start for free
Knowledge & documents card of Tierarztpraxis am Eichenhain in SmartChat: Drag file here, below it the note that a photo is not a suitable format

The servers are protected.

SmartChat protects the servers that store your data.

  • ProtectedYour contacts and conversations are stored on servers in Germany.

Every file is checked first.

This applies to your media library just as much as to Knowledge & documents and to files your contacts send you via WhatsApp.

Only checking the file extension

  • A web page disguised as logo.png gets through.
  • A graphic with a hidden script ends up in storage.
  • Files from contacts are saved unchecked.

SmartChat checks the content

  • SmartChat looks inside the file and rejects it if the content doesn't match.
  • SmartChat rejects SVG graphics with scripts. As a PNG or JPG, the upload works.
  • SmartChat checks images, videos and PDFs from your contacts before they're saved.

SmartChat AI reads your website safely.

When SmartChat AI analyzes your website, the server only accesses public addresses on the internet. It never reaches internal addresses, not even through a redirect.

AI Chat in SmartChat: SmartChat AI has analyzed Gut Erlenhof, the landing page is already up

  • Public addresses only

    SmartChat rejects addresses from internal networks before a connection is made.

  • Every redirect checked

    If a page redirects, SmartChat checks the new address the same way.

  • With time and size limits

    If a page responds too slowly or is too large, SmartChat stops.

Messages from Meta only with a signature.

Every WhatsApp message arrives at SmartChat with a signature from Meta. Without a valid signature, SmartChat rejects it.

  1. Your contact writes

    They send a WhatsApp message to your number.

    WhatsApp

  2. Meta signs

    Meta forwards the message to SmartChat and signs it with a secret key.

    signature

  3. SmartChat checks

    If the signature doesn't match, SmartChat rejects the message.

    Approved

  4. In the inbox

    Only then does the message land in your inbox.

    inbox

  • Payments too

    SmartChat only accepts payment notifications with a valid signature. That way nobody can fake a plan.

SmartChat can't be embedded in other websites.

That way no other website can invisibly embed SmartChat and trick you into clicking. Your landing page, on the other hand, can be embedded in your own website.

Frequently asked questions about the technical security.

Where do SmartChat's servers run?

The SmartChat app runs on servers in Germany. The other service providers SmartChat uses, for example Meta for WhatsApp sending, are listed in the privacy policy.

What files can I upload?

In Knowledge & documents you upload PDF, Word and TXT files, and in your media library things like images and videos. SmartChat checks every file before it's saved.

What happens to files my contacts send me?

SmartChat checks images, videos and PDFs from WhatsApp just like your own files. If the content doesn't match the file type, SmartChat doesn't save it.

Why does SmartChat reject my SVG graphic?

An SVG graphic can contain hidden program code. If it does, SmartChat doesn't save it. In that case, upload the graphic as a PNG or JPG.

How does SmartChat know a message really comes from WhatsApp?

Meta signs every message to SmartChat with a secret key. SmartChat checks this signature and rejects every message without a valid signature.

How does SmartChat protect payments and plans?

SmartChat only accepts payment notifications with a valid signature.

What is clickjacking?

With clickjacking, another website invisibly embeds a real page so you click on something you don't want to. That's why SmartChat can't be embedded in other websites.

Can I embed my landing page in my website?

Yes. The block only applies to the SmartChat app. Your landing page can be embedded in your own website.

Is my landing page encrypted on my own domain?

Yes. Every connection to SmartChat is encrypted, in the app just like on your landing page, including on your own domain.

Where do I report a security vulnerability?

Write to us at team@smartchat.marketing. How SmartChat handles incidents is explained under Handling security incidents.

Try SmartChat now for free.

Enter your website. SmartChat AI analyzes it, and in 60 seconds your WhatsApp marketing system is ready.

Try it free now