← Back to TalkScope
🛡️

Security & Data Protection

TalkScope is built with a security-first architecture. Your conversations contain sensitive business data — we treat them that way.

🔒 PII Auto-Redacted🏗️ Multi-Tenant Isolated🎙️ Audio Never Stored✅ GDPR Compliant
🔒
PII Auto-Redaction

Every transcript is scanned before storage. Credit cards, phone numbers, emails, SSNs, passwords — all replaced with safe placeholders automatically. Your customers' sensitive data never touches our database.

✓Credit card numbers → [CARD-REDACTED]
✓Phone numbers → [PHONE-REDACTED]
✓Email addresses → [EMAIL-REDACTED]
✓SSN, bank accounts, passwords
🏗️
Multi-Tenant Isolation

Every database query is scoped to your organization ID. It is architecturally impossible for data from one workspace to appear in another. Isolation is enforced at the code level on every single API endpoint.

✓Organization-scoped queries everywhere
✓No shared data between customers
✓Verified on every API call
✓Clerk-authenticated sessions
🔐
Encryption in Transit

All data between your browser and our servers is encrypted using TLS 1.3 — the latest and most secure transport protocol available. This includes API calls, file uploads, and authentication.

✓TLS 1.3 on all connections
✓HTTPS enforced, no HTTP fallback
✓Secure WebSocket for real-time
✓HSTS headers enabled
🎙️
Audio Never Stored

When you upload audio files, they are sent directly to OpenAI Whisper for transcription and immediately discarded. Only the resulting text transcript is saved — and only after PII redaction.

✓Audio sent to Whisper, then deleted
✓Only transcript text is stored
✓PII redacted before transcript is saved
✓OpenAI does not train on API data
🏢
Enterprise Infrastructure

TalkScope is built on infrastructure trusted by thousands of enterprise companies worldwide. Every provider we use holds SOC 2 Type II certification.

✓Neon PostgreSQL — SOC 2 Type II
✓Vercel — SOC 2 Type II
✓Clerk Auth — SOC 2 Type II, GDPR
✓AWS underlying infrastructure
🗑️
Your Data, Your Control

You own your data. Delete individual conversations, agents, teams, or your entire organization at any time. Deletion is permanent, cascading, and takes effect immediately.

✓Delete conversations instantly
✓Delete agents + all their data
✓Delete organization — removes everything
✓Account deletion within 30 days

How Your Data Flows

Every transcript goes through this pipeline before being stored

📤
You upload
Transcript or audio file
→
🔒
PII Scan
Cards, phones, emails removed
→
🧠
AI Analysis
OpenAI scores conversation
→
💾
Safe Storage
Redacted transcript saved
🔒 Key guarantee: Sensitive data is redacted in Step 2, before it ever reaches our database in Step 4. The raw unredacted text exists only in server memory for milliseconds.

Infrastructure & Certifications

Every provider in our stack holds enterprise-grade security certifications

ProviderRoleCertificationsData Center
NeonPostgreSQL Database
SOC 2 Type IIISO 27001
AWS us-east-1
VercelApp Hosting & CDN
SOC 2 Type II
AWS + Cloudflare
ClerkAuthentication
SOC 2 Type IIGDPRCCPA
AWS
OpenAIAI Scoring + Whisper STT
SOC 2 Type II
Microsoft Azure
🐛
Found a security issue?

We take security reports seriously and respond within 48 hours. Please disclose responsibly.

📧 security@talk-scope.com
← Home📖 Documentation🔒 Privacy Policy
© 2026 TalkScope