Abril 10, 2026
WhatsApp & Instagram Integrations and Token Encryption
WhatsApp and Instagram are now enabled on production. All integration access tokens are encrypted at rest using AES-256-GCM.
Added
- WhatsApp and Instagram integrations are now available on production (no longer marked as "Coming Soon").
- All integration access tokens are now encrypted at rest using AES-256-GCM with a server-side encryption key.
- Backward-compatible decryption — existing plaintext tokens continue to work and are encrypted on next refresh or reconnect.
Security
- Sensitive credential fields (access_token, refresh_token, app_secret) across all integrations (Meta, Zalo, TikTok Shop, Shopify, Google Calendar, Cal.com, Google Business) are encrypted before storage.
- Non-sensitive identifiers (page_id, oa_id, shop, etc.) remain in plaintext for query matching.













