Security and Trust

Application, Data and Infrastructure Security in the Cloud

We know how critical Security and Compliance within the Eleveo products are to you and your customers. Our developers and engineers work diligently to ensure the security of your data and safeguard communication within and between Eleveo tools and components. Equally important, however, is the IT environment in which Eleveo is deployed.

Security & Compliance at Eleveo

At Eleveo, safeguarding your data is a top priority. Our comprehensive suite of products is designed with built-in security features to help support your compliance requirements. While Eleveo software uses secure communication protocols within and across components, the overall security of your deployment also depends on the environment it's hosted in. Running Eleveo on a non-secure network may introduce the risk of data breaches.

To help you fully understand how Eleveo keeps your data secure—and what you can do to enhance that security—we’ve outlined key areas below.

Product Security

We take product security seriously. Eleveo’s cloud-based solutions are hosted on Amazon Web Services (AWS)—a trusted platform known for its secure, scalable, and resilient infrastructure. Our security measures include:

Data encryption in transit and at rest
Granular access controls to restrict data access to authorized users only
Regular backups and robust disaster recovery procedures

Data Security

Your data is protected at every step.

End-to-end encryption: We use industry-standard protocols to encrypt data both in transit and at rest.
Secure key management: AWS Key Management Services are used to handle encryption keys.
Isolated instances: Each customer operates in a fully isolated environment to prevent data crossover.
Access auditing: We regularly review access logs to detect and respond to any unauthorized attempts.
Reliable backups: Frequent backups are stored securely off-site to ensure data can be recovered in emergencies.

Infrastructure Security

Eleveo leverages AWS infrastructure to secure its systems against external threats:

Protection from DDoS attacks and unauthorized access using AWS-native security services
Continuous threat monitoring to detect and respond to risks in real time
Scalable, resilient architecture built to handle workloads securely and efficiently

Logging and Monitoring Application and system logging enabled on each server
Audit Trail CloudTrail, an AWS service, collects all API requests within the account and stores them in a separate audit account

Application Security

We follow best practices in secure software development to keep our applications protected:

Secure coding standards to prevent vulnerabilities
Automated and manual security testing throughout the development lifecycle
Ongoing vulnerability scanning and penetration testing
Intrusion detection and prevention systems (IDPS) to monitor for suspicious activity
Rapid response protocols to resolve identified issues

Compliance

Eleveo adheres to global regulatory and industry standards to protect your privacyperforming regular security screening, audits of our internal processes, and vulnerability scans on a regular basis. These include, but are not limited to:

SOC2 assessment
AWS Foundational Security Best Practices
CIS Benchmark
OWASP ASVS Level 3
OWASP Top 10

AWS, our cloud infrastructure provider, is also compliant with numerous certifications and regulatory requirements.

AI & Data Privacy: Eleveo Speech Generative AI

Your data stays private.

Eleveo does not share your data with third-party providers.
The Speech Generative AI runs on Eleveo’s private cloud or your on-premise infrastructure.
Our models are pre-trained—your call recordings and transcriptions are never used for training or shared externally.
No customer data leaves your environment for AI processing.

Data Residency

Eleveo recognizes the valuable role that security auditing plays in regulatory compliance. We support data residency by region. This means that we support the deployment of the Eleveo Solution to AWS within (or as close to) the defined region preferred by the Customer.

The region of your deployment will be communicated to you before or during the project phase of your deployment. However, as AWS maintains a policy of not disclosing the specific location of their data centers (to ensure security for all customers), Eleveo is not able to determine exactly where (which data center) your data will be hosted. Given the distributed network of locations provided by AWS, Eleveo can only provide the region within which your data will be hosted.

Peace of Mind with Eleveo: Security and Trust

Application, Data and Infrastructure Security in the Cloud

Security Overview

Security Audits