What Security Buys You
Six things you get, in plain language — with the protocol names underneath each one for whoever asks you for them.
Nobody can listen in on your calls
Calls and data are encrypted the whole way — while they travel between your phones and our servers, and while they sit on disk afterwards.
Only your people can get in
Staff sign in with the company login you already use, back it with a second factor, and see only the parts of the account their role allows.
Your data stays in Canada
Recordings, voicemail, call records and customer details are stored in Canadian data centres and encrypted while they sit there.
You can show an auditor what happened
Every administrative change and every call is written down, kept for as long as you choose, and searchable when somebody asks.
Sensitive calls stay need-to-know
Give each person the narrowest role that lets them do their job. Recordings, transcripts and customer records follow the same permissions.
You can name the infrastructure it runs on
Hosted on Microsoft Azure in two Canadian regions — Canada Central and Canada East — with encryption in transit and at rest.
Security Built Into Every Layer
Concrete security controls protecting your communications at every level.
Encryption
Industry-standard encryption protecting all data in transit and at rest
Access Controls
Granular role-based access and multi-factor authentication
Audit & Monitoring
Comprehensive logging of administrative and call activity
Data Residency
Canadian-hosted infrastructure in two Azure regions
Four Places Security Gets Applied
An attacker has to get through all four, not one.
The network
Who can reach the platform at all
The software
How changes get into production
Your data
How what you store is protected
Who signs in
How people prove they are who they say
Security for Every Industry
Security features designed to support the needs of regulated and security-conscious industries.
Financial Services
Secure communications with encryption and audit trails for financial organizations
Healthcare
Secure communications designed for healthcare privacy requirements
Professional Services
Confidential communication tools for legal, consulting, and advisory firms
Multi-Location Businesses
Centralized security management across distributed offices
Security Technologies We Use
What Actually Goes Wrong, and What Stops It
The four risks a business phone system really carries.
Somebody guessing a password
Repeated failed sign-ins are rate-limited, and accounts can require a second factor
Sign-ins are logged, and any session can be revoked from the portal
A stolen laptop or phone
Sign out a device remotely; its session and tokens stop working immediately
Single sign-on means removing someone from your directory removes their access
Someone running up your phone bill
Calls are only accepted from the IP addresses you list, and each trunk has a concurrent-call ceiling
Usage is visible in the portal as it accrues, not only at month end
A member of staff going where they should not
Role-based access — people see only the parts of the account their role allows
Every administrative action is written to an audit trail you can read
Security You Can Verify
Encryption Everywhere
Every voice call is protected with SRTP encryption. Every data connection uses TLS 1.2/1.3. Data at rest is encrypted with AES-256 via Azure managed encryption.
Canadian Data Residency
All data is hosted in Canadian Azure regions — Canada Central and Canada East. Private database endpoints keep database traffic off the public internet.