{"id":1621,"date":"2022-06-30T14:42:56","date_gmt":"2022-06-30T14:42:56","guid":{"rendered":"https:\/\/voicit.com\/?page_id=1621"},"modified":"2026-04-06T19:37:03","modified_gmt":"2026-04-06T19:37:03","slug":"security","status":"publish","type":"page","link":"https:\/\/voicit.com\/en\/seguridad\/","title":{"rendered":"Cybersecurity"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Updated on April 6, 2026.<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Cybersecurity at Voicit<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Commitment to safety<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

At Voicit, security isn't an added feature: it's a core principle that guides how we design, develop, and operate our platform. We work to ensure that businesses can trust that the data they enter into the platform is protected at all times.<\/span>
\nOur commitment translates into concrete practices: encryption of data in transit and at rest, infrastructure hosted in the European Union, strict access controls and a clear roadmap towards the most demanding certifications in the sector.<\/span><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

How we protect the roles: Data Controller and Data Processor<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Voicit acts as person in charge of treatment<\/strong> in accordance with Article 28 of the GDPR. This means that we process candidates' personal data on behalf of the client company, which decides what data is collected, for what purpose, and for how long it is kept.\n
\n

The client company (data controller):<\/strong><\/p>

  • Define the purpose of the treatment.<\/li>\n
  • Decide what information is entered into the platform.<\/li>\n
  • This is the person who informs participants about the processing of their data, in accordance with Article 13 of the GDPR.<\/li>\n
  • You can request the deletion of your data at any time from the platform itself.<\/li><\/ul>\n

    Voicit (processor):<\/strong><\/p>

    • Process the data exclusively according to the client's instructions.<\/li>\n
    • Implement the necessary technical and organizational measures to protect that data.<\/li>\n
    • It does not use any data for its own purposes.<\/li>\n
    • It facilitates the client's regulatory compliance by providing transparent information about their security practices and their sub-processors.<\/li>\n<\/ul>\nThis model ensures that each party has clear responsibilities and that the parties involved always know who manages their data and why.<\/span><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t
      \n\t\t\t
      <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t
      \n\t\t\t
      <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
      \n\t\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      Infrastructure security<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      Encryption<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      All communications with the Voicit platform are protected using TLS\/SSL encryption. Sensitive data is encrypted both in transit and at rest, ensuring that candidate information is protected throughout its entire lifecycle.<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t

      Storage<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      The data is stored in Google Cloud Storage<\/strong>, within the European Union<\/b>, using storage buckets and PostgreSQL databases with the security and availability standards of the Google Cloud infrastructure.<\/p><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t

      Servers<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      The application logic is executed in Microsoft Azure<\/strong>also in European zone<\/b>This architecture allows us to combine the strengths of both cloud providers while keeping all data within the European Economic Area.<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t

      Network and access<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      Access to Voicit's internal systems is restricted through authentication and authorization controls. Voicit supports Google SSO, allowing users to authenticate securely without needing to enter additional credentials on our platform.<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t\t\t
      \n\t\t\t
      <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
      \n\t\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      Application security<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      Safe development<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      Voicit integrates security practices into its development cycle, including code review and access control to repositories.<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t

      Penetration tests<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      Voicit conducts third-party security penetration tests annually to identify and correct potential vulnerabilities before they can be exploited.<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t

      Vulnerability analysis<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      Network vulnerability analyses are carried out annually by third parties, assessing the robustness of the infrastructure against external threats.<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

      \n\t\t\t\t
      \n\t\t\t\t\t\t\t
      \n\t\t\t
      <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
      \n\t\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      Data management and privacy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      What data do we process<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      During the use of the platform, Voicit may process the following candidate data, depending on what the client company decides to enter:<\/p>

      • Personal data:<\/strong> name, email address and other identifying data provided by the company.<\/li>
      • CV Content:<\/strong> professional and academic information that the company shares with the platform.<\/li>
      • Audio and voice:<\/strong> recording of the interview conducted by the candidate.<\/li>
      • Transcription:<\/strong> conversion of the interview content to text.<\/li>
      • Analysis and reports:<\/strong> evaluation generated with the assistance of artificial intelligence from the interview.<\/li><\/ul><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        Data retention and deletion<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        Participant data is stored on the platform as long as the client company needs it for its processes. The client company can delete the data at any time directly from the platform.<\/p>

        Voicit is actively working on implementing automated retention policies that allow defining retention periods and deleting data on a scheduled basis once its purpose has been fulfilled.<\/p><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

        \n\t\t\t\t
        \n\t\t\t\t\t

        Participants' Rights<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        Participants whose data is processed through Voicit have the rights recognized by the GDPR: access, rectification, erasure, restriction of processing, data portability, and objection. To exercise these rights, participants must contact the company managing their conversation, as it is the data controller. Voicit will collaborate with the company to address any request within the timeframes established by law.<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

        \n\t\t\t\t
        \n\t\t\t\t\t\t\t
        \n\t\t\t
        <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
        \n\t\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        Sub-processors<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        To provide our service, Voicit uses technology providers who act as data processors. All of them comply with the security and privacy standards required by the GDPR.<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

        \n\t\t\t\t
        \n\t\t\t\t\t\n \n \n \n \n \n \n \n \n \n \n
        Assistant Manager<\/th>\n Purpose<\/th>\n Location<\/th>\n <\/tr>\n <\/thead>\n
        Google Cloud (GCS)<\/td>\n Data storage and databases<\/td>\n UE<\/td>\n <\/tr>\n
        Microsoft Azure<\/td>\n Application servers<\/td>\n UE<\/td>\n <\/tr>\n
        Google APIs<\/td>\n Processing (speech-to-text, among others)<\/td>\n UE<\/td>\n <\/tr>\n
        OpenAI<\/td>\n Artificial intelligence (interview analysis)<\/td>\n USA.*<\/td>\n <\/tr>\n
        Google Gemini<\/td>\n Artificial intelligence (alternative under development)<\/td>\n UE<\/td>\n <\/tr>\n
        Stripe<\/td>\n Payment processing<\/td>\n EU \/ US<\/td>\n <\/tr>\n
        Mailjet<\/td>\n Email communications<\/td>\n UE<\/td>\n <\/tr>\n <\/tbody>\n<\/table>\n

        * With standard contractual clauses (SCC) compliant with the GDPR.<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

        \n\t\t\t\t
        \n\t\t\t\t\t

        Note on AI and privacy:<\/strong> Voicit is developing an integration with Google Gemini as an alternative to OpenAI for artificial intelligence processing. By operating entirely within Google's European infrastructure, Gemini offers additional data protection guarantees under the GDPR. Our goal is to give our business clients the ability to choose which AI provider they want to use.<\/p><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

        \n\t\t\t\t
        \n\t\t\t\t\t\t\t
        \n\t\t\t
        <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
        \n\t\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        Certifications and regulatory compliance <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        Voicit operates in accordance with GDPR principles and is continuously working to raise its security standards. Below, we detail our current status and roadmap:<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

        \n\t\t\t\t
        \n\t\t\t\t\t

        Active compliance<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        • GDPR (General Data Protection Regulation):<\/strong> Voicit operates as a data processor in accordance with the GDPR. We implement technical and organizational measures to protect personal data, maintain infrastructure within the EU, and provide transparency regarding our sub-processors and processing practices.<\/li><\/ul><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t

          In our roadmap<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t

          • ISO 27001<\/strong> \u2014 Information Security Management System. An international reference standard that certifies the existence of a formal system for managing information security.<\/li>\n
          • SOC 2<\/strong> \u2014 Security, availability, and confidentiality controls. Framework for evaluating security controls in cloud services that store customer data.<\/li>\n
          • HIPAA<\/strong> \u2014 Health data protection. US standard applicable to organizations that handle protected health information. Considered in our development to expand the sectors we can serve.<\/li><\/ul><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
            \n\t\t\t\t
            \n\t\t\t\t\t

            Each step in this roadmap reflects a conscious investment in security. We will post updates here as we progress through each certification.<\/p><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

            \n\t\t\t\t
            \n\t\t\t\t\t\t\t
            \n\t\t\t
            <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
            \n\t\t\t\t\t
            \n\t\t\t\t
            \n\t\t\t\t
            \n\t\t\t\t\t

            Documentation and resources<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
            \n\t\t\t\t
            \n\t\t\t\t\t

            To facilitate the evaluation of Voicit by legal, compliance, or security teams, we provide the following resources:<\/p>

            • Privacy Policy:<\/strong> https:\/\/voicit.com\/politicas-de-privacidad\/<\/li>
            • Data Processor Agreement (DPA):<\/strong> Coming soon. If you need a Data Protection Agent (DPA) to begin your Voicit evaluation, please contact us at support@voicit.com.<\/li>
            • List of sub-managers:<\/strong> Available on this same page (previous section).<\/li>
            • Security contact:<\/strong> To report vulnerabilities or security inquiries, write to us at support@voicit.com.<\/li><\/ul><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t\t\t\t
              \n\t\t\t
              <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
              \n\t\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t\t\t\t
              \n\t\t\t
              <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t\t

              Frequently Asked Questions<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
              \n\t\t\t\t
              \n\t\t\t\t\t