SOC 2 Type II path
Controls mapped for access, change management, encryption at rest for BYOK/carrier secrets, audit logs, and production Redis/DB hardening. Formal audit scheduling available for Growth+ customers — email info@voxovo-ai.com.
Security
Compliance pack for regulated buyers
We ship privacy APIs and security controls in product. Certifications are a process — here is what is ready today and what we commit to for enterprise deals.
HIPAA / BAA readiness
BAAs available under enterprise agreement. Recording retention, PHI minimization in prompts, and warm-transfer for clinical handoff. Not a substitute for your covered-entity policies — we support the technical controls.
Data residency
Workspace data_region (default us). Recording retention days configurable; GDPR export and hard-delete APIs under /api/privacy. EU residency options on enterprise request.
Operational controls
Google OAuth + Voxovo session JWTs, platform API keys (omni_sk_), org suspension, workspace isolation, signed webhooks (X-Voxovo-Signature), and admin audit trails.