SPOC · SaaS Platform

Secure, controlled and auditable WhatsApp Business communication

SPOC — Saya Peduli Omnichannel Center enables authorized teams to connect a WhatsApp Business Account they own or manage, handle conversations, use approved templates and monitor service status from one dashboard.

Access model
Controlled onboarding
Service provider
LAZNAS Saya Peduli
Initial scope
Internal operations & verified partners
Service

What SPOC provides

Features are limited to legitimate service communications performed by properly authorized users.

01

Unified inbox

Receives and displays incoming WhatsApp conversations so they can be handled by authorized personnel of the client organization.

02

Message delivery

Sends replies within the conversation window and Meta-approved WhatsApp templates, subject to consent and a legitimate communication purpose.

03

Routing and assignment

Routes conversations to the appropriate team, manages handling status and helps prevent duplicate responses.

04

Templates and reporting

Manages approved template usage, displays delivery status, and provides service metrics and user activity audit records.

Data transparency

How we use Meta Platform Data

Meta Platform Data is processed only to provide the communication functions requested by the client organization. Each organization retains ownership and control of its own Business Portfolio, WABA, phone numbers and customer relationships.

Business identity

Business ID, WABA ID, Phone Number ID, business name, display name and asset metadata are used to verify the assets selected by an authorized user.

Authorization

Authorization codes and access tokens are used to make approved API requests. Credentials are encrypted at rest and are not displayed back to users.

Messages and media

Message content, sender identity, attachments, timestamps and conversation context are used to display and handle requested communications.

Service status

Sent, delivered, read or failed status, webhook events and technical metrics are used for service tracking, troubleshooting and audit.

Templates

Template name, language, category, content and approval status are used to help organizations use templates approved by Meta.

Meta permissions and their purposes

business_management

Reads Business Portfolio identity and verifies that the user is authorized to select the business assets being connected.

whatsapp_business_management

Reads and manages the WABA, phone numbers, business profile, templates and webhook subscriptions selected by the client organization.

whatsapp_business_messaging

Registers the selected phone number and sends or receives messages and media as instructed by the client organization.

Protection

Security and governance controls

Least-privilege access

Role-based access control limits functions and data according to each user's duties. Administrative access is restricted.

Organization separation

Each organization's data and configuration are logically separated. Users can access only the tenant assigned to them.

Encrypted credentials

Tokens and sensitive credentials are encrypted server-side and are never placed in frontend code, URLs, screenshots or application logs.

Audit and monitoring

Configuration changes and important activities are recorded for security, incident investigation and accountability.

Limited retention

Data is retained only as needed for the service, security, dispute resolution and legal obligations, then deleted or anonymized.

No sale of data

Platform Data is not sold, used for cross-service profiling, or used for advertising that was not requested by the user.

Service lifecycle

Onboarding and client control

  1. 1

    Organization verification

    We verify the organization, responsible contact, service requirement and the authority of the user requesting access.

  2. 2

    Authorization through Meta

    The organization's administrator signs in through Meta's official dialog and selects the Business Portfolio, WABA and phone number to authorize.

  3. 3

    Limited activation

    The system validates permissions and assets, activates the approved channel and records the process without storing the user's password.

  4. 4

    Control and revocation

    The organization may request channel deactivation, revoke the integration through Meta, or request access, correction and deletion of its data.

Service provider identity

SPOC is operated by LAZNAS Saya Peduli to support responsible service communications. The details below allow client organizations, end users and platform reviewers to verify the service provider.

Last updated: 19 August 2026

WhatsApp and Meta are trademarks of their respective owners. SPOC is not a Meta product and does not claim affiliation with or endorsement by Meta.