Skip to content

Trust & Security

You’re handing us your customer system. Here’s how we protect it.

WebDevAuto builds and operates your website, call answering, and CRM, which means we hold real customer data. This page is the straight answer to “is it safe?” If you need something not covered here, email porter.websales@webdevauto.com.

Encryption everywhere

TLS in transit and encryption at rest for all customer data, on Google Cloud infrastructure.

Least-privilege access

Role-based access controls, audit logging of administrative actions, and least-privilege service accounts.

You own your data

Your customer data, and any custom code we build for you, is yours. Full export on request, anytime.

US data residency

Data is stored and processed in the United States unless your agreement specifies otherwise.

Breach notification

If we ever confirm a security incident affecting your data, we notify affected customers without undue delay and within 72 hours of confirmation, with what we know, what we’re doing, and what you should do. We’d rather tell you early than tell you late.

Data & code ownership

Your data is yours. The custom application code we build for you on a fixed-bid engagement is yours and is transferred to a repository you control at project close. You can export your CRM data (leads, contacts, history) at any time by request. If you leave, you leave with your data and your code.

See the full terms on custom builds and in our Terms of Service.

Subprocessors

We publish the named third-party providers used by the platform, what they do, and the categories of data they may process. We limit provider access to the data needed for the enabled feature and keep the public list aligned with the product as integrations change.

View the named subprocessor list

Uptime & monitoring

We monitor the sites and systems we operate and target 99.9% uptime. Service-specific commitments, if any, are governed by the applicable agreement rather than this summary page.

Compliance & agreements

Our handling of customer data is described in the Privacy Policy, and we maintain a Data Processing Agreement for applicable processing relationships. Healthcare is handled more conservatively: the standard WebDevAuto CRM and Ava voice workflows are not represented as a HIPAA PHI workflow. Any deployment that would store, transmit, summarize, record, or otherwise handle PHI requires a separate technical, vendor, contractual, and BAA review before that workflow is activated.

For procurement & security teams

Available on request:

  • Security questionnaire information appropriate to the product scope
  • W-9 and available business/vendor documentation
  • Data Processing Agreement information for applicable processing
  • Current subprocessor and data-flow information

Healthcare customers should raise any proposed PHI workflow during procurement so it can be reviewed before activation. We do not treat a generic vendor-review request as approval to process PHI.

Email porter.websales@webdevauto.com with “Vendor review” in the subject.

Built on infrastructure you already trust

Google Cloud

Hosting · database · auth

Stripe

Payments · billing

Twilio

Voice · SMS

Anthropic

AI (Claude)

Deepgram

Speech for the voice agent

Resend

Transactional email

The full named list, including AI and email providers, is on the subprocessor page.

© 2026 WebDevAuto · Salt Lake City, UT