How We Protect You
We've taken a multi-faceted approach to protecting your business and end user data.
Data Security
VBG has a comprehensive set of physical, network, and logical protection services and policies.
Privacy Protection
Protection of your end users' privacy is paramount to VBG. All personal data is fully AES-256 encrypted.
Compliance
It's easy to integrate our services into processes subject to PCI, HIPAA, GDPR, CCPA and other standards.
Data Security
A comprehensive set of safeguards and policies to protect you and your customers, regardless of deployment location
Physical Security
VBG Hosting features fully managed data centers located in multiple locations. In addition to geographic redundancy for your data, each location has numerous physical safeguards:
-
Nondescript buildings
-
Multi-level external locks
-
Limited access server rooms
-
SOC 1 Type 1, SOC 2 Type 2, SOC 3
Network Security
VBG Hosting includes many hardware- and software-based network safeguards to protect both your data while in transit and our systems from unwanted traffic and malicious attacks. 24x365.
-
Hardware-based firewalls
-
VPN required for remote access
-
3rd party intrustion detection
-
Active DDoS protection
Logical Security
VBG employs additional server- and service-level safeguards to ensure that only authorized users and API traffic are able to connect with the VBG Platform and its supported deployments.
-
Software firewalls fully enabled
-
Security tokens for API access
-
SSL certificates for every server
-
Client-level data segmentation
Minimal User Data
The VBG data model has been designed to store the absolute minimum amount of personally identifiable information, or "PII". In fact, speech samples are the only PII we accept!
And, we've developed a comprehensive Privacy Policy to clearly articulate how ALL end user data is handled, from beginning to end.
Privacy Policy
Secure Access & Data Encryption
The only way to send and retrieve data is via our API. All data communications are fully secured via HTTPS, and API access is further protected by tokens.
Individual speech samples, voiceprints, and optional content descriptions are fully encrypted using AES-256 under FIPS 140-2 guidance.
Compliance
Since our inception, VBG has made substantial investments to provide compliant operations within the critical industry areas our clients and partners operate in.
PCI-DSS Compliance
VBG processes millions of requests per year in our data center. And while it is not possible to accept credit card data in our system, we still actively maintain PCI certification:
-
PCI Level 4 certification
-
Quarterly PCI scans performed
-
Annual Penetration Testing
GDPR Compliance
VBG is a processor of voice biometric data, a sensitive category according to GDPR. Thus, we've created special functions and policies to allow us to work seamlessly with our clients and partners.
-
GDPR Compliance Statement
-
Full DPA contract support
-
Personal Data Manager (PDM)
Other Laws and Statutes
VBG actively monitors national, state, and industry-specific regulations and statutues relative to our existing data model and policies. Other guidance our tools and policies help to support:
-
HIPAA
-
CCPA
-
BIPA
Do You Have Any Questions?
Please let us know how we can help you and we'll respond promptly!
