Security at Operato.

Every agency on Operato is walled off from every other, inside the database itself. Row-level security runs on every table, so one agency can never see or touch another’s data. We check this automatically on every single code change. If a change could ever let data cross between agencies, it cannot ship.

Operato connects to Google Ads, GA4 and Meta to read your numbers, score each client and draft actions for you. It never posts, pauses, edits or spends anything in your accounts. Disconnect any account in one click and its data leaves with it.

The data from your connected accounts is used for one thing: running Operato for you. We do not sell it, we do not use it to target ads, and we do not hand it to anyone outside the services that make the product work.

Traffic between your browser, Operato and the platforms you connect runs over encrypted connections. The tokens that link your accounts are encrypted before they are stored, using AES-256, with the key kept outside the database. A stolen copy of the database on its own gives up nothing usable.

Access is set per person. Owners and admins see the whole agency. A team member sees only the clients they are assigned. This is enforced in the database, not just hidden in the interface, so it holds on every screen and through every integration. Nobody can promote their own account or move themselves into another agency.

Everything the system does is written to an audit log that can be added to but never edited or deleted. There is always a truthful record of what happened and when.

Operato runs on cloud infrastructure that is independently certified to SOC 2 Type II. Testing runs in an environment kept completely apart from production, so your live data is never used to try out changes. Our own certification is on the roadmap, and we will publish it here once it is complete.

Found a security issue? Tell us before you share it publicly. We read every report and get back to you quickly.