Encryption everywhere
Data is encrypted in transit with TLS 1.2+ and at rest with AES-256. Voice samples are processed into biometric templates — raw recordings are not retained.
Privacy by design
We never sell or share your voice data. You can export or permanently delete your data at any time from your account.
Strong authentication
HttpOnly session cookies, refresh-token rotation, rate limiting, and optional 2FA/TOTP protect every account.
Hardened infrastructure
A strict Content Security Policy, secure HTTP headers, and least-privilege access controls guard our platform end to end.
Responsible disclosure
We welcome reports from security researchers. If you believe you've found a vulnerability, please email us with details and steps to reproduce. We commit to acknowledging your report promptly and keeping you updated as we investigate.
Report a vulnerabilityCompliance roadmap: We are building toward SOC 2 Type II and ISO 27001 alignment as part of our path out of beta. For current details on data handling, see our Privacy Policy.