Security

Only you and your team see your information

Makatea stores the names, the phone numbers and the balances in your portfolio. This is how we protect them.

Encryption in transit and at rest

All traffic travels over TLS. The information is stored on cloud infrastructure with encryption at rest.

AES-256 at rest · TLS 1.2+ in transit

Your account sits on its own

Your account runs isolated at the database level. Your information never mixes with anyone else's.

Logical isolation per organization (RLS)

Role-based access control

Each person on your team works within what their role allows. You grant and revoke access.

RBAC with least privilege

Audit logs

Every sensitive action is written to the audit log. The log cannot be edited.

Append-only audit log

Managed backups and infrastructure

The backups run on their own. Authentication and infrastructure are managed cloud services.

Encrypted backups · high availability

We ask for the minimum

We ask only for the data needed to operate. We do not store sensitive information we don't use.

Minimal surface: no unnecessary PII
Infrastructure

Where your information lives

Makatea runs on managed cloud infrastructure. Backups and monitoring run on their own in every region where we operate.

Questions

What people ask before uploading their book

Third-party data, permissions and the law. Short answers, no fine print.

Yes. Reminding someone of a debt is legitimate, and no Mexican law bans the channel. What is regulated is HOW: no threats, no disclosing the debt to third parties, no calling at any hour, no posing as an authority or a law firm. Makatea writes reminders in that tone on purpose, and sends inside a time window you define.
You do. You are the one responsible for that information before your customers; we only process it to provide the service. We do not sell data, do not mix it with another account's, and do not use it for anything other than sending and recording what you ordered.
If you store your customers' names and phone numbers, you already needed one, with or without Makatea: Mexico's federal data protection law requires it. Our part is not making compliance harder: you can delete a person, export their information, and leave a record of when it happened.
You delete it yourself, from your account, without asking us or waiting on anyone. These are the ARCO rights — access, rectification, cancellation and objection — and the law gives you a deadline to answer, so the tool cannot be the bottleneck. The deletion is written to the audit log with its date.
Only whoever you give that role to. Each person signs in with their own account and works within what their role allows, so front-desk staff can record activity without seeing the whole book. Access is granted and revoked the same day, and every sensitive action is signed with a name and a timestamp.
Not as a routine. Your account runs isolated and nobody outside your organization sees it. One of our engineers only steps in when you report a problem and ask us to look, and that access is logged too. What we never do is look out of curiosity, or train anything on your conversations.
It stays yours and you can take it with you. You can export your book and your history at any time, including on your last day. We do not hold data hostage to keep anyone from leaving.
No. Makatea reminds, records and communicates; the money goes straight from your customer to you, through however you already get paid. We are not a bank or a payment gateway, we hold no funds, and we take no commission on what you recover.
Create your account

Get started with Makatea

Leave us your details and your account is ready right away. Makatea builds your calendar from your sector and portfolio size.

We only use this to contact you. No spam.

Or book a 30-minute demo