Security & Compliance

Last Updated: December 1, 2024

Enterprise-grade security measures protecting your data and ensuring compliance with industry standards.

Our Security Commitment

Security is fundamental to everything we do. We implement defense-in-depth strategies, maintain industry certifications, and continuously monitor for threats.

99.99%
Uptime SLA
24/7
Monitoring
SOC 2
Certified
Zero
Data Breaches

Security Certifications

SOC 2 Type II

Certified

Annual third-party audits ensuring enterprise-grade security controls

ISO 27001

Certified

International standard for information security management systems

GDPR Compliance

Compliant

Full compliance with European data protection regulations

HIPAA Ready

Ready

Healthcare data protection standards for medical AI applications

Security Measures

Data Protection

End-to-End Encryption

AES-256 encryption for data at rest, TLS 1.3 for data in transit

All data encrypted with unique keys

Chat Data Security

Voiceflow conversation data encrypted and isolated

Secure API connections with conversation encryption

Backup & Recovery

Automated daily backups with point-in-time recovery

99.99% data durability with cross-region replication

Data Retention

Automated data lifecycle management and secure deletion

Cryptographic erasure and certified destruction

Access Security

Multi-Factor Authentication

Required for all user accounts and administrative access

TOTP, SMS, and hardware token support

Role-Based Access Control

Principle of least privilege with granular permissions

Dynamic role assignment with access reviews

Single Sign-On (SSO)

Enterprise SSO integration with SAML 2.0 and OAuth 2.0

Supports major identity providers

Session Management

Secure session handling with automatic timeout

Token-based authentication with refresh

Infrastructure Security

Cloud Security

Enterprise-grade cloud infrastructure with 99.99% uptime SLA

AWS/Google Cloud with shared responsibility model

Network Security

Advanced firewall rules and network segmentation

VPC isolation, DDoS protection, traffic monitoring

API Security

Rate limiting, authentication, and input validation

API gateways with threat detection

Payment Security

Secure payment processing through certified providers

Stripe, PayPal, JCCSmart integration with PCI compliance

Monitoring & Detection

24/7 Security Monitoring

Continuous threat detection and incident response

SIEM integration with automated alerting

Vulnerability Management

Regular security assessments and penetration testing

Quarterly assessments by certified firms

Audit Logging

Comprehensive logging of all system activities

Immutable logs with 12-month retention

Incident Response

24-hour response team with escalation protocols

Documented procedures for security incidents

Compliance Standards

Data Encryption

Implemented
AES-256 encryption at rest
TLS 1.3 for data in transit
Key management with HSM

Access Controls

Implemented
Multi-factor authentication
Role-based permissions
Regular access reviews

Monitoring

Implemented
Comprehensive audit logs
Real-time monitoring
Incident response

Data Governance

Implemented
Data classification
Retention policies
Secure deletion

Incident Response

24/7 Incident Response

Our security team maintains round-the-clock monitoring with documented procedures for rapid response to security incidents.

Detection

  • • Automated monitoring
  • • Threat intelligence
  • • Anomaly detection

Response

  • • Immediate containment
  • • Impact assessment
  • • Stakeholder notification

Recovery

  • • System restoration
  • • Evidence preservation
  • • Lessons learned

Security Research

Responsible Disclosure

We welcome security researchers to help maintain the highest security standards. Please report vulnerabilities responsibly.

Reporting:

  • • Contact via AI chat agent
  • • Include detailed description
  • • Provide reproduction steps
  • • Allow reasonable response time

Our Commitment:

  • • 24-hour acknowledgment
  • • Regular status updates
  • • Researcher credit (if desired)
  • • No legal action for good faith

Security Questions?

Our AI chat agent is available 24/7 to address security questions, report issues, or handle security-related concerns.

💬 Chat with our AI Security Assistant

Get information about security practices, report vulnerabilities, or ask compliance questions.

Business Address: 37 Evagora Palikaridi, Limassol, Cyprus

Phone: +357 (97) 888-064