Security in every layer.

Security isn’t an add-on to our services: it’s built into the design from day one. We apply internationally recognized best practices, train our team and review our processes regularly.

And we’re honest: no system connected to the internet is invulnerable. That’s why we protect in layers, so a failure in one doesn’t compromise the others, and we have a clear plan to act fast if something happens.

• HTTPS required: all browsing is encrypted with SSL/TLS certificates; if someone arrives over http, we send them to the secure version.
• Static site: there’s no exposed database or public admin panel, which removes many of the most common attack vectors.
• Security headers: the server tells the browser to block unauthorized embedding, not to guess file types and to protect your browsing information.
• No payments on the site: this website doesn’t ask for or store card details.
• Always up to date: we keep the dependencies and tools it’s built with up to date.

• Access based on the principle of least privilege: each person sees only what they need for their work.
• Two-step verification on email, code repositories, hosting and work tools.
• Unique passwords kept in an encrypted password manager, never in chats or documents.
• Credentials for your platforms (social media, hosting, domains) are shared over secure channels and revoked when the project ends.
• Work computers with encrypted drives, automatic lock and up-to-date software.
• Confidentiality agreements with the entire team and with any provider that accesses client information.

Every system, app or site we deliver comes with security built in:

• Design based on the OWASP Top 10: prevention of SQL injection, XSS, CSRF and unauthorized access.
• User passwords stored with modern hashing algorithms such as bcrypt or Argon2, never in plain text.
• Per-user roles and permissions, plus activity logs to know who did what and when.
• Sensitive data encrypted both at rest and in transit.
• Separate development, testing and production environments: we don’t use your real data for testing without your permission.
• Code review and testing before every release, plus security updates throughout the support period.

• We connect your WhatsApp agents through Meta’s official WhatsApp Business API.
• The agent accesses only the information it needs to help customers (catalog, hours, calendar), never more.
• We configure AI providers with the settings that exclude your conversations from training their models, wherever the provider allows it.
• Clear limits on what the agent can say or do, with handoff to a person on your team when the conversation calls for it.
• Protected conversation history with restricted access.

• We authenticate your domain with SPF, DKIM and DMARC, so no one can spoof your brand and your emails land in the inbox.
• Lists built with consent, with one-click unsubscribe in every send.
• Contact databases on secure platforms, with restricted access and never shared with third parties.

• Servers in professional data centers with a firewall, DDoS protection and malware scanning.
• SSL certificates that renew automatically.
• Automatic daily backups and tested restores.
• 24/7 uptime monitoring with alerts to our team.
• Security updates for the software we manage.

We don’t store card details. When a project needs online payments, we integrate certified payment gateways (PCI DSS) and bank QR payments, so financial information is processed directly by authorized institutions.

We have a clear protocol, with defined owners:

• Detect and contain: we isolate the problem immediately to limit any impact.
• Investigate and fix: we find the cause, close the gap and restore from secure backups if needed.
• Notify: if your data could be affected, we let you know without delay, within 72 hours of confirming it at the latest, explaining what happened, what we did and what we recommend.
• Learn: we document what happened and strengthen our controls so it doesn’t happen again.

Found a possible security flaw on this site or in one of our services? We truly appreciate it. Email us at hola@networkingbolivia.net with the subject line “Security” and include:

• A description of the issue and where you found it.
• The steps to reproduce it, if you have them.
• Your contact details so we can reply.

• We’ll never ask for your passwords or verification codes over WhatsApp, email or phone.
• Our official channels are this site, hola@networkingbolivia.net and WhatsApp +591 78146670. Be wary of any others.
• Turn on two-step verification for your email, social media and hosting.
• If you get a suspicious message in our name, don’t click anything: forward it to us and we’ll check it.

We review this policy at least once a year and whenever we add new tools or services. The date of the last update is always shown on this page.

Last updated: September 25, 2026.