Help index · Platform
Compliance (not a certification)
What Octone logs and encrypts versus what SOC 2 or HIPAA certification would require.
Octone does not claim to be SOC 2 or HIPAA certified.
What we do
- HTTPS in the browser; hashed passwords; encrypted SIP and webhook secrets
- Optional recording consent prompt
- Audit log: who viewed recordings, exported calls, changed users, toggled recording
What certification requires
Independent audits, policies, and (for HIPAA) a signed Business Associate Agreement. That is a separate program.
Request a BAA at /legal/baa. Read practices at /legal/security.