Security Overview
Effective 2026-05-01
Our security architecture, certifications, and disclosure programme.
Silux Control UK Ltd trading as Silux Voice
Registered in England and Wales, company no. 11901981 · VAT no. GB 321 2589 23
Prospect House, Staveley, Chesterfield, S43 3QE · info@siluxvoice.com
Registered in England and Wales, company no. 11901981 · VAT no. GB 321 2589 23
Prospect House, Staveley, Chesterfield, S43 3QE · info@siluxvoice.com
Architecture
TLS 1.2+ everywhere; AES-256 at rest; mTLS between control plane and inference; fernet-encrypted credentials.
Certifications
SOC 2 Type I in progress; Type II target H2 2026. HIPAA: Business Associate Agreement available on request (see /legal/baa). PCI DSS SAQ-A scope on agent payment flow; SAQ-D-Lite scope on DTMF flow. GDPR / UK GDPR / CCPA + CPRA / TCPA / two-party consent flows shipped.
Vulnerability disclosure
Email info@siluxvoice.com — we acknowledge within 48h, patch within 14 days for High/Critical, 90 days for Low/Medium. See /.well-known/security.txt.
Hall of fame
Researchers who responsibly disclosed a vulnerability. (We update this list with permission.)
Other documents: Privacy Policy · Terms of Service · Cookie Policy · Data Processing Agreement · HIPAA Business Associate Agreement · Service Level Agreement · Acceptable Use Policy · Sub-processors · Accessibility Statement