Trust & Safety

Security at UDBOARD

Last updated: 2026-01-01

Encryption in transit

All data between your browser and our servers is encrypted using TLS 1.2+. Calling sessions use WSS (WebSocket Secure). We do not support unencrypted connections.

Encrypted at rest

All stored data including call recordings, contact records, and messages is encrypted at rest on DigitalOcean managed infrastructure.

Authentication

Passwords are hashed using bcrypt with a cost factor of 12. We support email OTP as a passwordless login option. JWT tokens are short-lived with secure refresh token rotation.

Workspace isolation

Every piece of data is scoped to a workspace. Cross-workspace data access is enforced at the API level — no shared data, no leakage between tenants.

Role-based access

Three-tier role system (Owner / Admin / Member) enforced server-side on every API request. Members cannot access billing, settings, or other workspaces.

Audit logging

AI suggestions, key actions, and authentication events are logged. Call recordings and transcripts are tied to the call log for traceability.

Infrastructure

Hosted on DigitalOcean (Debian 12). Network access controlled by UFW firewall. Database and Redis bound to internal network only — not exposed to public internet.

Backups

Database backups are performed daily. Call recordings are stored in cloud object storage with versioning enabled.

Found a vulnerability?

We appreciate responsible disclosure. Email security@udboard.com and we'll respond within 48 hours.