Trust & Safety
Security at UDBOARD
We take the security of your business communications seriously. Here's how we protect your data.
Encryption in transit
All data between your browser and our servers is encrypted using TLS 1.2+. SIP calls use WSS (WebSocket Secure). We do not support unencrypted connections.
Encrypted at rest
All stored data including call recordings, contact records, and messages is encrypted at rest on DigitalOcean managed infrastructure.
Authentication
Passwords are hashed using bcrypt with a cost factor of 12. We support email OTP as a passwordless login option. JWT tokens are short-lived with secure refresh token rotation.
Workspace isolation
Every piece of data is scoped to a workspace. Cross-workspace data access is enforced at the API level — no shared data, no leakage between tenants.
Role-based access
Three-tier role system (Owner / Admin / Member) enforced server-side on every API request. Members cannot access billing, settings, or other workspaces.
Audit logging
AI suggestions, key actions, and authentication events are logged. Call recordings and transcripts are tied to the call log for traceability.
Infrastructure
Hosted on DigitalOcean (Debian 12). Network access controlled by UFW firewall. Database and Redis bound to internal network only — not exposed to public internet.
Backups
Database backups are performed daily. Call recordings are stored in cloud object storage with versioning enabled.
Found a vulnerability?
We appreciate responsible disclosure. Please email us and we'll respond within 48 hours.
security@udboard.com