Security Overview

Voxvaani is built from the ground up with secure-by-default architecture. We recognize the trust you place in us to route voice and message data, and we deploy a defense-in-depth approach to shield resources from unauthorized access, system failure, and disruption.

Encryption is standard across our platform to safeguard your data at every state:

• In Transit: All connections to the Voxvaani web panel, API nodes, and WebSocket streaming servers are protected using strong TLS 1.3 encryption.
• At Rest: All databases, configuration data, call transcript archives, and media buckets are encrypted using industrial-strength AES-256 standards.
• Transient Voice Streams: Live conversational call streams processed by our speech synthesis nodes are processed transiently in volatile memory (RAM) and are not written to persistent storage unless you explicitly enable recording logs.

Voxvaani is hosted inside highly secure, audited data center infrastructures (Amazon Web Services and Supabase):

• **Network Isolation:** Our database nodes operate inside dedicated Virtual Private Clouds (VPC) protected by strict firewalls and security groups.
• **DDoS Protection:** Enterprise-grade Web Application Firewalls (WAF) filter requests, throttle traffic, and mitigate DDoS spikes.
• **Monitoring & Alerting:** Continuous monitoring systems track response rates, database load anomalies, and server integrity parameters 24/7.

Authentication and request filtering are strictly enforced:

• **API Keys:** Client tokens are hashed in our databases. We advise keeping developer tokens highly confidential.
• **Password Hashing:** User account passwords are encrypted using high-entropy hashing algorithms (bcrypt/Argon2) before database insertion.
• **Tokenized Sessions:** Web panel sessions are secured using encrypted HTTP-Only cookies to protect against XSS and session hijacking.

We build integrations with security-first third-party partners:

• Our payment processing provider (Stripe) is audited under PCI-DSS Level 1 specifications.
• Our hosting partners hold SOC 2 Type II, ISO 27001, and HIPAA-compliant data center certifications.

We operate a coordinated vulnerability disclosure system. If you identify a potential security issue on our platform, please report it directly to our security engineers: