Compliance & Security Updated Mar 2026
Data Protection & Privacy
How Sakura SMS protects your data and your customers' privacy.
dataprivacyprotectionsecurityencryptiongdpr
Your Data is Safe
Sakura SMS takes data protection seriously. Here's how we safeguard your information and your customers' data.
Infrastructure Security
- Encryption in Transit: All data transmitted via HTTPS/TLS 1.3
- Encryption at Rest: Database encryption for sensitive fields
- API Key Hashing: API keys are hashed with SHA-256 — we never store them in plain text
- Webhook Signatures: HMAC-SHA256 signed payloads prevent tampering
Data Handling
- Contact data is scoped to your tenant — no cross-tenant data access
- Message content is stored for delivery tracking and then archived
- No data is shared with third parties
- You can export and delete your data at any time
Access Control
- Role-based access: Admin, User, Viewer
- API keys are scoped to individual accounts
- Session management with automatic timeout
- Activity logging for audit trails
Data Deletion: To request complete data deletion, contact support at [email protected]. We process deletion requests within 72 hours.