Security

Security comes first in everything we do. We do not sell, rent or otherwise disclose personal information collected by our services. If you delete a file, it's removed from our servers completely, there is no way to recover deleted files.

Our application is built on modern cloud infrastructure designed to ensure safety of your data, and we have carefully selected third party providers who have a consistent track record for security.

How we keep your data secure

Data Storage

All communication related to data is encrypted using TLS (Transport Security Layer), our servers are ISO, SOC, and PCI compliant. Our databases use Transparent Data Encryption (TDE) which protects data at rest from unauthorized or offline access to raw files or backups.

Employees

All employees and contractors sign a confidentiality clause, they also undergo annual Security and Awareness training. Our internal security policies cover a range of topics, and are updated frequently. All laptops are encrypted and customer data is not stored in employee devices. Employees don't have access to your audio or transcripts unless consent is explicitly given.

Controlled Access

We control access to data for staff and contractors. They only see what they need to in order to carry out their jobs; for example, customer service employees will only have access to your name, email address and file names to help assist you with your problem. Strong access controls are enforced by organisational and technical safeguards. When working with third parties we conduct an assessment to ensure they have the relevant safeguards in place.

Backups and recovery

We maintain a disaster recovery and business continuity plan. For example, in the event of a natural disaster our backup strategy and distributed servers would allow us to bring services backup within a few hours.

Third-Party Security

We partner with several other companies to give you the best service we possibly can. Our third-party providers:

• Stripe provide all our billing and payment requirements. Stripe has been audited by a PCI-certified auditor and is certified to PCI Service Provider Level 1. This is the most stringent level of certification available in the payments industry. You can view more information about their security practises here. We only have limited access to the billing information entered in the system.
• Microsoft Azure is our cloud hosting provider. All data is stored on their servers. The data centres follow the highest standards of security both digital and physical. They have a range of security measures including guards, CCTV and monitored access to servers. Our servers are on a separate virtual network, completely separate from other Azure clients. Data on the Azure platform is always encrypted in transit.
• Google Analytics provides our usage and activity tracking. You can view more about their security practises here.

Find out more on our terms and privacy pages. Have any questions or feedback? Please drop us an email at support@go-transcribe.com