Security

Built to be trusted. Locked down by default.

NerveCore holds your orders, your customers and your messages, and your own AI works on them. So here is exactly what protects them, and nothing we have not built.

Approvals

Nothing goes out without your OK

A customer message, a post, an ad, a price change or an invoice waits as a card until you approve it. You choose which jobs may run on their own, and you can take that back at any time.

Encryption

Saved keys are encrypted

Logins and keys NerveCore keeps (your mailbox, WhatsApp, Yoco, WooCommerce, Telegram, your own AI keys) are sealed with AES-256-GCM and never sent to your browser. Apps you connect through our integration partner, Composio, are held by them.

Your business only

Every read is scoped to your workspace

Which business a request belongs to comes from your login or your connection, never from what the request claims. Two businesses under one login stay separate.

Webhooks

Forged calls are turned away

Messages from Meta, Paystack, Yoco, WooCommerce and Telegram are signature-checked. An unsigned or forged call is rejected, not processed.

Rate limits

Floods get stopped

Our public endpoints are rate-limited, and an address that keeps hammering them is blocked for an hour.

Privacy

Your key, your customers

Each business gets its own encryption key for its customer messages. Numbers you mark private are never stored or answered. Our staff can open your data only with your grant, and every opening is logged for you to see.

Your accounts stay yours.

Connect a tool once, disconnect it any time. We keep the minimum we need, encrypt what we keep, and never sell your data. You can ask for full deletion whenever you want.

See our Privacy Policy and Data Deletion policy.

Straight talk

We don’t claim badges we haven’t earned.

What you see on this page is what is actually running. Approvals on by default, encrypted keys, and access to your data logged for you.

Tell us about your business →