Your social accounts are your business's front door. Here's how we protect the keys.
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Social platform tokens are additionally encrypted at the application layer, so a database copy alone cannot expose them.
We never see or store your social media passwords; connections use each platform's OAuth flow. Internal access to production data is role-based, logged, and limited to the engineers who need it to support you.
EloPost runs on SOC 2–certified cloud infrastructure with automated backups, network isolation between environments, and continuous dependency and vulnerability scanning.
Two-factor authentication is available on every plan. You can review connected platforms, revoke any connection instantly, and export or delete your data from settings at any time.
Found something? Email security@elopost.com. We acknowledge reports within 48 hours and won't pursue good-faith researchers.
Send us your website or Instagram. We’ll review your profile and show you what we’d post, free and with no obligation.