Security & Compliance

Enterprise-grade security built in from day one — not bolted on after.

HIPAA Ready

Selective PII redaction from call recordings and transcripts. Consent management, access audit logs, and BAA available for healthcare customers.

GDPR Compliant

Data export and erasure on request. Consent management, retention policies, and per-tenant data residency (EU, US, or IL).

SOC 2 (in progress)

Tamper-evident audit trails, security incident tracking, and penetration testing. SOC 2 Type II examination underway — program details available on request.

AES-256 Encryption

All secrets, recordings, and sensitive data encrypted at rest with AES-256-GCM. TLS 1.2+ in transit (TLS 1.3 preferred).

Multi-datacenter

Deployments available in the EU (Madrid), US (Virginia), and Israel (Tel Aviv). Data residency enforced per tenant.

Israeli Privacy Law

Compliant with the Israeli Privacy Protection Law and its regulations, including data localisation for Israeli enterprises.

Need a DPA or BAA?

Our Data Processing Agreement (with EU, US, and Israel appendices) applies automatically. Healthcare customers can review and execute our HIPAA Business Associate Agreement.

Request signed copies