Security & Data Protection
At Entergram, protecting your privacy and securing your data is foundational to everything we build. We design our platform with strong security principles from the ground up.
GDPR Compliant
Fully committed to the principles of the General Data Protection Regulation
AES-256-GCM
Military-grade encryption for your session files
Encrypted Vault
Secure browser-based storage for Telegram sessions
GDPR Compliance
We are fully committed to the principles of the General Data Protection Regulation (GDPR). This means we process personal data lawfully, transparently, and with appropriate safeguards — including minimizing data collection, respecting your rights (access, rectification, erasure, etc.), and implementing technical measures to protect your information.
Our practices align with GDPR requirements for data security, accountability, and user control. For full details on how we handle your personal data, please see our Privacy Policy.
Fully Compliant
How We Protect Your Telegram Sessions
Entergram lets you manage Telegram seamlessly in the browser or across devices. Here's how we keep your sessions secure:
Client-side (browser) storage for CRM sessions
Most session data — especially sensitive CRM-related Telegram sessions — is stored exclusively in your browser using industry-leading security technologies. Your data never leaves your device unencrypted.
We've upgraded our vault to use military-grade encryption protocols optimized for both speed and resilience:
AES-256-GCM
The gold standard in symmetric encryption, making your session files completely unreadable to unauthorized parties (even if someone gains access to your device storage).
scrypt Key Derivation Function
A memory-hard KDF specifically designed to resist hardware-accelerated brute-force attacks, dramatically increasing the computational cost of guessing your passphrase.
Local Master Key Architecture
Your personal passphrase unlocks a master key that exists only on your device. This key never leaves your browser or travels to our servers — meaning even in the unlikely event of a server compromise, your encrypted sessions remain protected.
Server-side storage for Analytics & Shared Dashboards
Analytics data and shared dashboards are hosted on our secure servers for performance and collaboration features. While any server-side storage carries some risk in the event of a breach, all session-related data is encrypted end-to-end using the same strong protocols described above. Access is tightly controlled, and we follow best practices like regular security reviews and secure configuration to minimize exposure.
Additional Security Measures
We also implement additional standard security measures to build trust and reduce risk:
- HTTPS everywhere (TLS encryption in transit for all connections)
- Strict access controls and least-privilege principles
- Regular monitoring for suspicious activity
- Secure development practices to prevent common vulnerabilities
Your Security is Our Priority
We continuously evolve these protections to keep pace with emerging threats while keeping the experience fast and frictionless.
If you have questions about our security practices or want to exercise any data rights, feel free to contact us at hello@entergram.com
