Businesses kept apart
Every record belongs to one business, and every request is checked against the business that is signed in. Another business's data is not reachable, and this is covered by tests.
Available now
Security and your data
Your business information stays yours, and stays separate
We tell you what protects your information, and just as plainly what we do not claim. Everything below is something we can point to in our code, our tests or our operating notes.
- Available now
Every request is checked against the business that is signed in
Protection in layers
What protects your business information
Each item is in use on the platform today.
Roles and permissions
Owner and Team member access levels. Owners manage the team; the menu and the server both limit what a person can do.
Available now
Two-step sign-in
A second step with an authenticator app or an e-mailed code. Passwords are stored only as salted hashes, and repeated wrong attempts are limited.
Available now
Signed-in devices
See where you are signed in and end any session you do not recognise, or every other one at once.
Available now
Encrypted connection
The platform is served over HTTPS and tells browsers to keep using it (HSTS).
Available now
Abuse protection
Sign-in, two-step codes, password reset and forms are rate-limited. Public forms check for abuse, and every public write is validated and size-limited.
Available now
Browser protections
The portal sends a strict content security policy, cannot be framed by another site and refuses requests from foreign origins.
Available now
Audit trail
Changes are recorded with who made them and when. The early-access business operations area also keeps the values before and after.
Available now
Daily backups
The database is backed up every night, each backup is checked, and a restore is tested on every test run. The newest 14 are kept.
Available now
Monitoring and alerts
The platform watches its scheduler, backups, certificates and the websites it manages, and alerts WEKRAM staff by e-mail.
Available now
Secrets handled carefully
Keys and passwords the platform needs are kept outside the web folders with owner-only permissions, are not in the code and are not in database dumps.
Available now
Logs without secrets
Server logs never contain codes, tokens or passwords, and old logs are rotated away after 14 days.
Available now
Only the right people
Control who gets in, and see where they are
You decide who has access. If a phone is lost or a colleague leaves, you can end their access yourself.
- Invite colleagues by e-mail and choose Owner or Team member for each.
- Turn on two-step sign-in so a stolen password alone is not enough.
- Sign out any device from the list, or all other devices in one click.
- WEKRAM staff sign in to the staff console with a second step that is not optional.
Sample ElectronicsA
Team
The people who can sign in to your business.
People
Asha PatelOwnerActive
Ravi KumarTeam memberActive
Sneha RaoTeam memberInvited
Invite someone
Imran Sheikh
imran@example.com
Team member
Team member: enquiries and requests. Owner: everything, including team, invoices and business details.
Send invitation
Sample ElectronicsA
Signed-in devices
Where you are signed in. End any you do not recognise.
Chrome on Windows This deviceActive now
WEKRAM BIZ for Android YesterdaySign out
Edge on Windows 3 days agoSign out
Sign out of every other device
How we handle your data
- Your customers, enquiries and invoices belong to your business. You and your team see them; other businesses cannot.
- You can export or delete one person's data from their contact page, to answer a privacy request.
- Website statistics count visits without cookies, IP addresses or personal data.
- This website sets no cookies and loads nothing from other hosts. What it collects when you send an enquiry is in the privacy notice.
A copy away from the server
In development
An encrypted copy of the backups, kept on another computer and another drive, is built and tested, but it is not yet running on a schedule. Today the verified nightly backups are kept on the platform's own server. We will say so here when the second copy is switched on.
What we do not claim
- We hold no security certification and have no audit report to show you.
- We give no uptime guarantee and no promise of a recovery time.
- Our security reviews so far have been carried out by WEKRAM itself, not by an outside firm. The most recent was on 4 November 2026, and we acted on what it found.
- No system is perfectly safe. If you think something is wrong, write to contact@wekram.com and we will look at it.
Related
Web, Android and WindowsWEKRAM BIZ is available on the web today.About WEKRAMWEKRAM builds and supports business websites and the WEKRAM BIZ platform for its clients.What is available todayAn honest list of what you can use today, what is in early access, what is in development, and what is not built yet.
Questions about security?
Ask us anything before you decide. We answer plainly, including when the answer is "not yet".