Security & Compliance
Your Data is Safe
with Voksha.
Every plan is SOC 2 compliant and ISO 27001 compliant, with calls encrypted at rest (AES-256) and in transit (TLS 1.2+). HIPAA with BAAs, GDPR, CCPA and a 99.9% uptime SLA are on the Enterprise plan.
Built for Organizations
That Can't Afford Downtime.
- AES-256
- Encryption at Rest
- TLS 1.2+
- Encryption in Transit
- SOC 2
- Compliant, every plan
- ISO 27001
- Compliant, every plan
How Voksha handles a scam call.
Scammers call small businesses pretending to be a bank or a supplier. Voksha never gives out private details and notes who tried. In our call data, its guardrails held in 99.96% of attempts.
How Voksha keeps calls safe Source: Call Intelligence report
Security Practices
How We Protect
Your Business.
Security is not an add-on. It is built into every layer of Voksha.
End-to-End Encryption
All voice data, transcripts, and business information are encrypted in transit with TLS 1.2+ and at rest with AES-256. No unencrypted data ever leaves our platform.
Zero Data Selling
Your data is yours. We never sell, share, or monetize your business data, call recordings, or caller information. Our revenue comes from subscriptions, not your data.
SOC 2 & ISO 27001 Compliant
Every plan is SOC 2 compliant (we follow SOC 2 controls, reviewed internally) and ISO 27001 compliant. Monitoring and incident response procedures protect your data around the clock.
HIPAA on Enterprise
On the Enterprise plan, Voksha is HIPAA compliant, with Business Associate Agreements (BAAs), PHI protection, and encrypted storage of patient communications.
PIPEDA & Canadian Compliance
PIPEDA and Quebec Law 25 compliant, with Canadian data storage for Canadian businesses.
Role-Based Access Controls
Granular permissions ensure team members only access what they need. Admin controls, audit logs, and session management keep your account secure.
Phone Scam Protection
Built-in defenses against phone scams. Voksha recognizes manipulation attempts and never gives out private details during calls.
Data Retention Controls
You control how long data is stored. Configure retention policies for call recordings, transcripts, and contact information. Delete data on demand at any time.
Compliance
Built for Regulated
Industries.
Every plan is SOC 2 compliant and ISO 27001 compliant. HIPAA with BAAs, GDPR, CCPA and a 99.9% uptime SLA are on the Enterprise plan.
Healthcare (HIPAA, Enterprise plan)
- HIPAA compliant with Business Associate Agreements (BAAs) on Enterprise
- Protected Health Information (PHI) safeguards
- Encrypted storage of patient call data
- Audit trails for all data access
Legal (Attorney-Client Privilege)
- Confidential call handling protocols
- No third-party data sharing
- Clio and legal CRM integration security
- Intake data isolation per firm
Canadian Privacy (PIPEDA)
- PIPEDA-compliant data handling
- Quebec Law 25 compliant
- Canadian data storage
- Consent management built in
GDPR & CCPA (Enterprise plan)
- GDPR compliance on the Enterprise plan
- CCPA compliance for California consumers on the Enterprise plan
- State-specific call recording disclosures
- Data deletion on request
Infrastructure
Secure Cloud
Infrastructure.
Multiple layers of protection on cloud infrastructure in North America.
North American Data Centers
Secure facilities with physical security, redundant power, and 24/7 monitoring. US and Canadian data residency options available.
DDoS Protection
Multi-layered DDoS mitigation ensures your AI receptionist stays online even during volumetric attacks.
Automated Backups
Continuous data backups with geographic redundancy. Point-in-time recovery helps protect against data loss.
Network Isolation
Virtual private cloud architecture with network segmentation. Customer data is isolated at the infrastructure level.
Vulnerability Scanning
Automated security scanning and penetration testing. Vulnerabilities are identified and patched before they become threats.
Incident Response
24/7 security monitoring with documented incident response procedures. Customers are notified within 72 hours of any breach.
Yes, on the Enterprise plan (from $990/month). Enterprise is HIPAA compliant with Business Associate Agreements (BAAs), GDPR and CCPA compliant, and covered by a 99.9% uptime SLA. Every plan, including Starter and Premium, is SOC 2 compliant and ISO 27001 compliant and encrypts calls (AES-256 at rest, TLS 1.2+ in transit).
Yes. Voksha follows SOC 2 controls, reviewed internally, and is SOC 2 compliant and ISO 27001 compliant on every plan, from Starter to Enterprise.
No. Voksha never sells, shares, or monetizes your business data or caller information. Your data belongs to you. We use it only to provide and improve the service for your account.
All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. Call recordings, transcripts, and caller information are stored in encrypted databases with strict access controls. If a breach ever happens, affected customers are notified within 72 hours.
Yes. Voksha is PIPEDA-compliant for Canadian businesses and compliant with Quebec's Law 25. Canadian business data can be stored in Canadian data centers, and we ensure proper consent management and data handling for Canadian callers.
Voksha data is stored in secure data centers in North America. US business data stays in US data centers, and Canadian business data can be stored in Canadian data centers upon request.
Have Security
Questions?
Our team is ready to discuss your specific security and compliance requirements. We provide detailed documentation for enterprise customers.