Wolp
Trust Center

Wolp

Wolp drafts outreach and replies, and a person approves them before anything is sent. It runs on Cloudflare and is operated by Tobias Kocúr, sole trader, company ID 57739951.

Compliance
GDPR

Privacy policy, named controller, consent for analytics. Data processing agreement on request.

Web configuration scans
Public scans, measured on 25 October 2026.
  • app.wolp.aiMozilla ObservatoryB+SSL LabsB
  • wolp.aiMozilla ObservatoryDSSL LabsB
  • trust.wolp.aiMozilla ObservatoryA+SSL LabsB

Mozilla ObservatorySSL Labs

Controls

Updated 25 October 2026
Infrastructure security
4
  • Hosted on Cloudflare Workers

    Durable Objects (SQLite), Workflows and queues with dead-letter handling.

  • Separate database per customer account
  • HTTPS only

    Plain HTTP redirects to HTTPS.

  • Uptime monitoring

    Checks every 3 minutes and a public status page.

Product security
6
  • Multi-factor sign-in required

    Authenticator codes and passkeys, with recovery codes.

  • Server-side sessions

    30 days sliding, 90 days maximum.

  • Re-confirmation for sensitive actions

    Valid for 10 minutes.

  • Sign-in rate limits and audit log

    Log kept 90 days.

  • Agent access with OAuth 2.1 and PKCE

    Access tokens last 30 minutes, refresh tokens rotate, scopes are read or write.

  • Human approval of outgoing messages

    A person approves the first message and each offer. Agents cannot approve.

Organizational security
3
  • Privacy policy, cookie policy and terms published
  • Internal security audit

    24 October 2026. No critical or high findings.

  • Named data controller and contact address
Internal security procedures
2
  • Production dependency audit

    Clean on 24 October 2026.

  • Access limited to the operator

    No other staff.

Data and privacy
3
  • Website analytics only after consent

    Google Analytics and Microsoft Clarity.

  • Unconfirmed website signups deleted

    After 30 days.

  • Deletion on request

    Email tobias@wolp.ai.

Subprocessors

  • CloudflareHosting, database, queues, networkUnited States
  • AnthropicAI model that drafts and reads messagesUnited States
  • ResendSending and receiving emailUnited States
  • GoogleSign-in, Gmail and Calendar, only if you connect themUnited States
  • NangoConnections to other apps, only if you connect one–
  • Better StackUptime monitoring and status page–
  • AttioWaitlist recordsUnited Kingdom
  • Google AnalyticsWebsite analytics, only after consentUnited States
  • Microsoft ClarityWebsite analytics, only after consentUnited States

Location is where the provider is based. A new subprocessor is listed here before it is used.

FAQ

Does Wolp train AI models on customer data?

No. Wolp sends message content to Anthropic to draft and read messages. Wolp does not train models.

Where is data stored?

On Cloudflare's network, in a separate database per customer account.

How do I delete my data?

Email tobias@wolp.ai.

Who can access customer data?

Tobias Kocúr, the sole operator.

Report a vulnerability
Email tobias@wolp.ai with steps to reproduce. Do not access other people's data. There is no bug bounty. Details in security.txt.