Encryption
TLS in transit and encryption at rest for core datastore and object storage.
Access control
Role-based workspace permissions, SSO-ready paths, and audited admin actions.
Infrastructure
Hardened cloud environments, network segmentation, and continuous monitoring.
Privacy by design
Retention controls, redaction options, and clear subprocessors for call data.
Compliance readiness
Policies aligned with SOC 2-style controls; BAAs/DPAs available for eligible plans.
Responsible disclosure
Report issues to security@vox-lumen.ai — we investigate and remediate promptly.
1. Application security
- Secure coding practices and dependency monitoring
- Authentication protections and session management
- API authentication via keys and scoped tokens
- Input validation and abuse-rate protections on public endpoints
2. Voice & media data
Call audio and transcripts are processed to deliver the agent experience you configure. Workspace admins control retention windows and whether recordings are stored. We recommend minimizing sensitive data collection and using warm-transfer for high-risk cases.
3. People & vendors
- Least-privilege access for employees supporting production
- Background checks where legally permitted for relevant roles
- Subprocessors under written agreements with confidentiality and security obligations
4. Incident response
We maintain an incident response process covering detection, containment, remediation, and customer notification when required. If you suspect a security issue in your account, contact security@vox-lumen.ai immediately.
5. Customer responsibilities
- Protect API keys and invite only trusted workspace members
- Configure consent and disclosure for recorded calls as required
- Review integration scopes and rotate credentials periodically
6. Request documentation
Enterprise customers can request a security overview, DPA, or questionnaire support via Contact or security@vox-lumen.ai.
Questions? Contact us or email legal@vox-lumen.ai.