Security

Security and privacy come first in everything we do. We do not sell, rent or otherwise disclose personal information collected by our services, and we do not use customer audio, video or transcripts to train AI models.

If you delete a file, it is removed from our systems and cannot be recovered. Our application is built on modern cloud infrastructure designed to keep your content safe, and we carefully select third-party providers with strong, independently audited security practices.

How we keep your data secure

Encryption and data storage

All communication between your browser and our servers is encrypted using TLS (Transport Layer Security). Our cloud infrastructure provider maintains ISO, SOC and PCI-related certifications for their data centres. Databases and storage use encryption at rest to help protect data against unauthorised or offline access to raw files or backups.

Access control and authentication

Access to production systems is restricted to authorised personnel on a need-to-know basis. Strong access controls and authentication are enforced using technical and organisational safeguards. Customer service staff can only see the minimum information required to assist you, such as your name, email address and basic file metadata.

Employees and devices

All employees and contractors are bound by confidentiality obligations and receive regular security and privacy awareness training. Company devices are encrypted, and customer data is not stored on laptops or personal devices. Employees do not access your audio, video or transcripts unless it is strictly necessary to resolve a support case and you have explicitly requested or authorised this.

Data retention and deletion

You stay in control of your content. You can delete files and associated transcripts from your account at any time, and we remove them from our active systems. We retain only the minimum account and billing information required for legal, accounting and fraud-prevention purposes, as described in our Privacy Policy.

Backups and recovery

We maintain a disaster recovery and business continuity plan. Encrypted backups and geographically redundant infrastructure help us restore core services in the event of hardware failures, incidents or regional outages, so we can bring the platform back online as quickly as reasonably possible.

Third-party security

We partner with a small number of trusted providers to deliver our services. Each vendor is selected for their security posture and industry reputation, and we only share the minimum data required for them to perform their role.

• Stripe provides our billing and payment infrastructure. Stripe has been audited by a PCI-certified auditor and is certified to PCI Service Provider Level 1, the most stringent level of certification available in the payments industry. You can view more information about their security practices here. We do not store full credit card numbers on our systems.
• Microsoft Azure is our primary cloud hosting provider. All audio, video and transcript data is stored on Azure servers. Azure data centres follow strict physical and network security standards, including controlled access, monitoring and layered protections. Data on the Azure platform is always encrypted in transit, and we use logically isolated resources for our environment.
• Google Analytics provides anonymised usage and activity tracking so we can understand how the website is used and improve the product. You can view more about their security practices here.

To learn more about how we handle your data, please visit our Terms of Service and Privacy Policy pages. If you have any questions, security concerns or would like to request more details for a vendor review, please email us at support@go-transcribe.com.