Security

The technical detail behind our safeguarding commitments.

This page covers the technical implementation. For the policy and compliance view, see Safeguarding & Compliance.

Encryption in transit

All traffic between respondents, field devices, and our servers is encrypted over TLS/HTTPS. There is no unencrypted path into the platform.

Encryption at rest

Audio recordings and transcripts are stored in access-controlled object storage and a managed database, both encrypted at rest by our infrastructure provider.

Infrastructure

VoiceInsights Africa runs on Cloudflare's global edge network (Workers, D1, R2) — the same class of infrastructure used by major global platforms — with Twilio for telephony and messaging delivery.

Role-based access control

Every account has a defined role — organization admin, M&E officer, or system administrator — that scopes exactly what data they can see and act on.

Authentication

Passwords are hashed with PBKDF2 and never stored in plain text. Sessions use signed, time-limited tokens.

Fraud & anomaly detection

Automated checks flag near-duplicate responses and suspicious submission speed on every incoming answer, across every channel.

Data ownership

Your organization owns your data — full stop.

Every response, transcript, and report generated through your account belongs to your organization. VoiceInsights Africa processes it on your behalf and never sells or shares client data with third parties.

Need a security questionnaire completed?

We're happy to complete vendor security assessments and NDAs for procurement processes.

Contact Us