Skip to main content

Security

Your data security is our top priority.

SOC 2 Type II Certified

We employ enterprise-grade security measures to protect your customer data, call recordings, and business communications.

Security features

End-to-end encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.

SOC 2 Type II certified

Annual third-party audits verify our security controls meet the highest standards.

HIPAA compliant

Business Associate Agreements available for healthcare organizations.

GDPR compliant

Full compliance with European data protection regulations.

SSO & 2FA

SAML-based single sign-on and two-factor authentication for all accounts.

Audit logs

Complete activity logs for compliance and security monitoring.

Compliance certifications

We maintain rigorous compliance standards to meet the needs of regulated industries.

SOC 2 Type IICertified
HIPAACompliant
GDPRCompliant
CCPACompliant
ISO 27001In Progress

Infrastructure security

Data centers

  • AWS data centers with physical security controls
  • Geographic redundancy across multiple regions
  • Real-time data replication and backup
  • 99.99% uptime SLA

Application security

  • Regular penetration testing by third parties
  • Automated vulnerability scanning
  • Secure development lifecycle (SDLC)
  • Bug bounty program

Need more details?

Download our security whitepaper or request a security review for your organization.

Security FAQ

Where is my data stored?

All data is stored in AWS data centers in the United States. We can provide data residency in the EU upon request for Enterprise customers.

How long do you retain call recordings?

Call recordings are retained based on your plan settings. You can configure automatic deletion from 30 days to unlimited retention.

Do you have a BAA for HIPAA compliance?

Yes, we offer Business Associate Agreements for all Business and Enterprise plan customers.

How do you handle security incidents?

We have a documented incident response plan and will notify affected customers within 72 hours of any confirmed breach.

Security questions?

Our security team is happy to answer any questions about our practices.

security@klear.com