Security Practices

Enterprise-Grade Security

At Voxa, security is not an afterthought; it's the foundation of everything we build. We understand that your meeting data is highly sensitive, and we employ industry-leading security practices to ensure your information remains confidential and protected at all times.

Data Encryption

Your data is encrypted both in transit and at rest.

• In Transit: All data sent to or from Voxa is encrypted using TLS 1.3 or higher.
• At Rest: All data stored in our databases is encrypted using AES-256 encryption.

Infrastructure Security

We partner with leading cloud providers to host our services in secure, SOC 2 Type II and ISO 27001 compliant data centers. Our infrastructure is continuously monitored for vulnerabilities, and we employ automated intrusion detection systems.

Access Control

We follow the principle of least privilege. Access to production systems is strictly limited to authorized personnel who require it to perform their job duties. All access is logged and routinely audited. Multi-factor authentication (MFA) is required for all administrative access.

Vulnerability Management

We conduct regular security assessments, including automated scanning and manual penetration testing by independent third-party security firms. Any identified vulnerabilities are prioritized and remediated according to their severity.

4. Reporting Vulnerabilities

If you believe you have found a security vulnerability in Voxa, we encourage you to report it to us immediately at security@tryvoxa.app. We ask that you do not disclose the vulnerability publicly until we have had an opportunity to address it.