Skip to main content

Enterprise-grade security for your call data

Protecting recordings, transcripts, goal evaluations, and extracted data with industry-leading standards.

Security Standards

  • -

    Encryption: AES-256 at rest, TLS 1.3 in transit

  • -

    Access: RBAC

Compliance Certifications

  • -

    ISO 27001

  • -

    GDPR

  • -

    HIPAA (optional add-on)

Data Protection

  • -

    Anonymized biometrics: Voice fingerprints are stored as abstract vector arrays, impossible to reverse-engineer into audio.

  • -

    Secure uploads: Recordings are encrypted in transit via TLS and stored with automated replication to S3-compatible object storage (Cloudflare R2).

Infrastructure

  • -

    EU-Hosted: Runs in European data centers (Hetzner, Finland) with the database isolated on a private network.

  • -

    Containerization: Services run in Docker containers with strict resource isolation and regular image updates.

  • -

    Vector Database: Biometric data is managed in a hardened PostgreSQL instance with pgvector, ensuring efficient and secure high-dimensional query processing.

Access Control

  • -

    RBAC: Granular Role-Based Access Control (Owner, Admin, Member) ensures users only access data relevant to their role.

  • -

    Policy Enforcement: Authorization is handled via Pundit policies at the controller level, preventing IDOR (Insecure Direct Object Reference) attacks.

  • -

    Authentication: Secure session management via Devise with support for Multi-Factor Authentication (MFA) and Google OAuth 2.0.

Infrastructure

-

EU-Hosted: Runs in European data centers (Hetzner, Finland) with the database isolated on a private network.

Security audits

-

Regular third-party security audits.