Security & Compliance
Your data security is our top priority. We implement industry-leading security practices to protect your information.
Enterprise-Grade Security
We protect thousands of customers' voice AI infrastructure
Security Features
Encryption at Rest
All data is encrypted using AES-256 encryption
TLS/SSL in Transit
All connections use TLS 1.3 encryption
Password Hashing
Bcrypt with salt for password security
Access Control
Role-based permissions (RBAC)
Infrastructure Security
SOC 2 Type II certified cloud providers
Security Monitoring
24/7 threat detection and response
Data Protection
Encryption
- At rest: AES-256 encryption for all stored data
- In transit: TLS 1.3 for all network communications
- Passwords: Bcrypt hashing with unique salts
- Recordings: Encrypted storage with access controls
Access Control
- RBAC: Role-based access control (Owner, Admin, Member)
- MFA: Multi-factor authentication (coming soon)
- SSO: Single sign-on for Enterprise (SAML/OAuth)
- Audit logs: Complete activity tracking
Infrastructure
- Cloud: AWS/GCP with SOC 2 Type II compliance
- Backups: Daily encrypted backups with 30-day retention
- Redundancy: Multi-region failover capabilities
- DDoS: Protection against distributed attacks
Monitoring & Response
- 24/7 monitoring: Real-time threat detection
- Intrusion detection: Automated security scanning
- Incident response: Dedicated security team
- Alerts: Immediate notification of anomalies
Compliance & Certifications
SOC 2 Type II
Expected Q2 2025
GDPR Compliant
Full compliance with EU data protection
HIPAA
Coming soon for healthcare customers
Security Practices
Secure Development
- • Code reviews for all changes
- • Automated security scanning in CI/CD pipeline
- • Regular dependency updates and vulnerability patching
- • Penetration testing by third-party security firms
Employee Access
- • Background checks for all employees
- • Regular security training and awareness programs
- • Principle of least privilege for system access
- • NDA and confidentiality agreements
Incident Management
- • Documented incident response procedures
- • 24/7 security operations center
- • Customer notification within 72 hours of incidents
- • Post-incident analysis and remediation
Responsible Disclosure
We welcome responsible disclosure of security vulnerabilities. If you discover a security issue, please report it to us immediately.
Email: [email protected]
PGP Key: Available upon request
Response Time: Within 24 hours
Bug Bounty: Coming soon
Security Questions?
Our security team is here to answer any questions about our practices, compliance, or how we protect your data.