Security Overview

Effective 2026-05-01

Our security architecture, certifications, and disclosure programme.

Architecture

TLS 1.2+ everywhere; AES-256 at rest; mTLS between control plane and inference; fernet-encrypted credentials.

Certifications

SOC 2 Type II in progress (target 2027 Q2). HIPAA BAA available now. PCI DSS SAQ-A scope on agent payment flow; SAQ-D-Lite scope on DTMF flow. GDPR / UK GDPR / CCPA + CPRA / TCPA / two-party consent flows shipped.

Vulnerability disclosure

Email security@siluxvoice.com — we acknowledge within 48h, patch within 14 days for High/Critical, 90 days for Low/Medium. See /.well-known/security.txt.

Hall of fame

Researchers who responsibly disclosed a vulnerability. (We update this list with permission.)

Other documents: Privacy Policy · Terms of Service · Cookie Policy · Data Processing Agreement · HIPAA Business Associate Agreement · Service Level Agreement · Acceptable Use Policy · Sub-processors · Accessibility Statement