Krisp

Yes. Krisp's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Krisp hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Security isn't a single yes/no, but Krisp is SOC 2 Type II compliant and holds SOC 2 Type II, PCI DSS, HIPAA, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Krisp hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@krisp.ai or via a /security page (Krisp lists a security contact).

Krisp lists 27 subprocessors on its trust center, including Amazon Web Services, Twilio SendGrid, Hubspot, Microsoft Azure, Zendesk. Buyers use this for fourth-party risk review.

Krisp hosts on AWS, GCP, Azure, and handles For comprehensive information about the types of data collected by Krisp, please refer to the following links., https://krisp.ai/security-for-call-centers-enterprises/#customer-data, https://krisp.ai/security-for-ai-meeting-assistant/#customer-data. Data residency details are on its trust center.

Krisp's trust center is at https://trust.krisp.ai. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Krisp, available for Windows, Mac, Linux, and ChromeOS, is a desktop application that delivers AI-powered voice productivity tools to enterprise employees. It enhances communication by removing background noise, translating accents, and converting speech to text during calls, video meetings, recordings, or podcasts on popular platforms such as TalkDesk, Genesys, Five9, Zoom, and Microsoft Teams. Krisp functions as a virtual microphone and speaker, seamlessly integrating with any application. All voice audio data is processed locally on the user’s device, including during speech-to-text operations. Voice data never leaves the device, ensuring complete privacy, except when specific advanced features, such as the AI Voice Translation feature, are actively used.

Yes, Krisp employs encryption for both data in transit and data at rest. Data in transit is secured through the use of TLS 1.2 across all services without exception. Data at rest, including all production databases and customer information, is encrypted using AES-256, ensuring the highest level of security without exceptions.

Krisp supports three authentication methods for users: 1. Google sign-in (OAuth 2.0) 2. Email verification based sign-in (a random magic code is sent to the user’s email every time) 3. SAMLv2 based SSO (for team plans) Krisp backend doesn’t store passwords.

Krisp is committed to user privacy and ensures that personal data is not utilized to train its AI models. The AI models developed by Krisp are based on extensive datasets comprising 20,000 unique noise samples and 10,000 clear voice samples, representing a wide range of ages, genders, and ethnic backgrounds. These datasets were created through advanced techniques, including data augmentation, without relying on customer data.

At Krisp, access to customer data is strictly limited to a select group of key engineering leads. This controlled access is a standard industry practice to facilitate product development, issue resolution, and customer support. Any access granted to other engineers is on a case-by-case basis, solely for debugging purposes, and requires explicit authorization. All access activities, whether authorized or attempted without authorization, are continuously monitored through automated systems to ensure security and accountability.

Customer data is securely encrypted and stored using AWS infrastructure. Krisp utilizes AWS servers located in the Northern Virginia region of the USA.

Krisp's backend undergoes regular scans using industry-standard tools to monitor and detect vulnerabilities. Additionally, comprehensive penetration testing is conducted twice a year in collaboration with third-party security firms.

Krisp utilizes the HackerOne platform for its responsible disclosure program. Security researchers are encouraged to submit their findings through the following link: https://hackerone.com/krisp](https://hackerone.com/krisp

All team members undergo comprehensive Security 101 training to build a strong foundation in security awareness. Additionally, Krisp employees receive regular updates on the latest security trends to ensure they stay informed and prepared.