When we started woku in September of last year, we knew that there was something that couldn't be negotiable: data security. It's not just about a system that works, but about building trust from the first contact. Despite being a young startup, we have put our efforts into building an infrastructure that meets the highest security standards, regardless of the company's size.

It's not just privacy, it's trust*

Today, ensuring the customer experience goes far beyond data. We can't talk about improving processes or optimizing decisions without ensuring that everything we do is backed by a secure system. At woku, we are clear that trust is the basis of any relationship with our customers, so our priority has always been to protect the data we process.↻

We are constantly listening to our customers to create new compliance measures. In every interaction, we seek not only to comply with future certifications, but also to align ourselves with what they really need from a service that manages the experience of their own customers. Because we understand that, beyond security, it is essential that these measures reflect your expectations and address your concerns.

Meme of a Doge dog wearing pixelated sunglasses and the text 'We're here to protect you'.

What we're doing today to protect your data+3

Although we do not yet have specific certifications, we are not waiting for them to arrive to implement the necessary measures. From day one, we've been working with a proactive approach to security:

Security culture in the team: Every month, our team meets to reinforce personal security measures, ensuring that everyone uses strong passwords in any software that runs in the company, enables two-factor authentication, avoids opening questionable emails and never shares sensitive information. Safety starts with each of us.
Secure communication: All traffic between our services is encrypted with TLS/SSL, ensuring the privacy of communications using HTTPS. There is no room for “man-in-the-middle” attacks in our ecosystem.
Strong authentication and access control: Any access to sensitive data requires authentication, and all passwords are stored encrypted. Additionally, we manage sessions with JWT and follow strict policies to create secure passwords.
Data validation and security: Any data that enters the system is validated and sanitized. We don't leave room for code injections.
Secure and scalable infrastructure: Our application is dockerized, the images are stored in the Azure Container Registry and we use Azure Web App for deployment. In addition, our entire CI/CD process is managed through GitHub Actions, ensuring security and efficiency in each update.
Database security: The data we handle in MongoDB Atlas is encrypted both at rest and in transit. Only authorized services have access, maintaining strict control of the information we process.

Our Next Step: Security Certifications↑

By 2025, our goal is clear: to have certifications that support the security of our system. We will focus on meeting the necessary standards so that both our customers and their data are protected under industry best practices. We remain aligned with international standards, such as the ISO 27000 family certifications, and with every step we take, we are getting closer to offering a world class security system.

At woku, we know that security isn't just another function of the system. It's the foundation on which everything else should work.