Privacy Policy

Our Commitment to Security & Privacy

At VoiceOps, Inc., we are committed to protecting customer data through industry-leading security practices. Our web application is designed with robust security controls to safeguard high-volume customer interactions while ensuring compliance with regulatory requirements.

Security Measures & Protections

• Access Controls: We implement Role-Based Access Control (RBAC) to restrict data access to authorized personnel only. Additionally, access to our AWS infrastructure requires Multi-Factor Authentication (MFA) to ensure secure management of cloud resources.
• Data Encryption: All customer data is encrypted both in transit and at rest using AES-256 encryption and TLS 1.2/1.3 protocols to prevent unauthorized access.
• Redaction & Secure Deletion: Personally Identifiable Information (PII) is automatically redacted from both transcripts and audio files before AI processing, and original audio files containing PII are permanently deleted post-redaction to mitigate data exposure risks.
• Network Security: Our infrastructure is continuously monitored for vulnerabilities, with firewalls, intrusion detection systems (IDS), and automated threat detection mechanisms in place to detect and prevent unauthorized access.
• Incident Response & Monitoring: VoiceOps maintains a Security Incident Response Plan (SIRP) to promptly address potential security breaches. We conduct regular security audits, penetration testing, and real-time monitoring to detect anomalies.

Data Usage & Protection

• Minimal Data Collection: We only collect the data necessary for service functionality and compliance monitoring.
• Strict Data Handling Policies: All data is processed under strict security policies and is never shared or sold to third parties.
• Fraud Prevention & Risk Management: Our security framework includes fraud detection mechanisms to identify and mitigate risks proactively.

Data Retention & Compliance

• Retention Policy: Redacted transcripts are retained only as long as necessary for service functionality and compliance.
• Regulatory Compliance: We adhere to SOC 2 Type II standards, ensuring secure data handling, retention, and disposal.
• Secure Data Disposal: Data is deleted in accordance with best practices, following secure erasure protocols to prevent residual data exposure.

‍