Security & Trust
Learn about Pro Software account security, access controls, customer responsibilities, incident reporting, integrations and responsible vulnerability disclosure.
Our security approach
Pro Software is a cloud-based business management subscription platform provided by OSOO India Infotech Private Limited. Security is a shared responsibility across the company, infrastructure providers, customer administrators and connected third parties.
Account authentication
Customers should use unique strong passwords, available multifactor authentication, trusted devices and secure recovery options. Never share passwords or one-time codes with support representatives.
Role-based access
Workspace owners should grant staff only the permissions required for their work, remove departing users promptly and periodically review administrators, API keys and connected integrations.
Data transmission and storage
Appropriate transport encryption, storage protections and provider controls should be configured where supported. This public statement does not claim a specific certification, cipher, hosting region or encryption standard without technical verification.
Infrastructure and availability
Availability depends on application services, hosting, networking and third-party providers. Maintenance, outages and external disruptions can occur. Customers should maintain operational contingency plans for critical workflows.
Monitoring and logging
Security-relevant logs and diagnostics may be processed for abuse prevention, troubleshooting, incident investigation and legal compliance, subject to appropriate access and retention controls.
Vulnerability management
Security concerns should be assessed, prioritized and remediated based on risk and operational feasibility. We do not claim a formal penetration-testing cadence or independent audit that has not been verified.
Responsible disclosure
Report suspected vulnerabilities privately through the official contact route. Include affected URL, steps to reproduce, expected versus observed behavior and a safe proof of concept. Do not access others’ data, disrupt services, run destructive tests or publicly disclose sensitive details before coordination.
Incident response
We aim to investigate credible reports, contain threats, preserve necessary evidence and provide notices when legally required. No guaranteed incident response or recovery time is asserted without an approved service-level agreement.
Backups and recovery
Backup and restoration arrangements depend on the platform configuration and contracted providers. Customers should independently export business-critical records and verify restoration expectations for their subscribed plan.
WhatsApp and messaging safety
Customers must obtain required recipient permission, respect opt-outs, protect API credentials, avoid unlawful bulk outreach and comply with messaging-provider policies. Messaging limits and account approvals are controlled by the relevant provider.
AI and automation safety
Review AI-generated material, automated decisions and campaign triggers before publication. Limit sensitive prompts, test workflows and add human approval for high-impact actions.
Third-party connections
Integrations may require OAuth permissions, access tokens, webhooks or external accounts. Review requested scopes, rotate compromised credentials and disconnect unused integrations.
Employee and contractor access
Authorized operational access should be limited to legitimate support and maintenance needs under applicable internal controls. Specific personnel-screening or certification claims require evidence before publication.
Customer security checklist
Protect administrator accounts; enable available multifactor authentication; restrict exports; obtain consent for customer data; review integration permissions; train staff; maintain offline recovery information; and report suspicious activity promptly.
Compliance and certifications
The company should publish only certifications, audit reports, regulatory registrations and security guarantees that can be supported by current official evidence. No ISO, SOC 2, PCI DSS or other certification is claimed by this page.
Report a security concern
Use the official contact page at https://osooinfotech.com/book-a-demo and label the request “Security concern”. A dedicated security email, if approved, should replace this channel before launch.
Updates and limitations
Security practices evolve with the service. This page is an overview rather than a guarantee of uninterrupted operation, immunity from attack or a substitute for contractual security commitments.
Contact and legal correspondence
Pro Software is provided by OSOO India Infotech Private Limited . For general inquiries and appointment requests, visit osooinfotech.com/book-a-demo . Registered-office address, dedicated policy contact email, designated grievance officer and company registration numbers must be confirmed from official company records before publication. The phone number previously shown in the booking setup is +91 94416 44199 ; confirm it is approved for public policy inquiries before deploying.
These policy drafts should be reviewed and approved by qualified Indian legal counsel and the company’s authorized management. Mandatory rights under applicable law prevail over inconsistent wording.