Security & Architecture
How WXI protects your application and customer data.
Anonymous by design
WXI does not collect names, email addresses, phone numbers, or personal identifiers. Measurement is strictly focused on experience ratings and the specific operational impediment reported by the customer.
No cross-site cookies
The WXI embed does not set cross-site cookies or track users across domains. Pairing identifiers between the before and after touchpoints reside in the customer’s first-party local browser storage only, scoped entirely to your domain.
Data encryption
All traffic between your customers, your application, and WXI endpoints is encrypted in transit using modern TLS (TLS 1.3 preferred). Data at rest is encrypted using industry-standard AES-256 encryption.
Access controls and isolation
Data is logically partitioned by workspace and organisation. Access to dashboard analytics and raw responses requires authentication via multi-factor authentication, passkeys, or enterprise OAuth providers.
Reporting security issues
If you identify a vulnerability or have a security query, please contact us directly at security@acoustic.sg. We investigate all submissions promptly.