Identity and access
Role-based permissions, least privilege, revocable sessions and strong credentials.
Security
Security designed for real operations.
We protect identities, calls, configuration and operational data through customer isolation, least privilege, European infrastructure and changes verified before they reach production.
Infrastructure and residency
The platform core is in the European Union.
The application, primary database and dedicated telephony instances are hosted on Hetzner servers in Finland. Customer-enabled recordings use Cloudflare R2 with a Western Europe location preference. Strict residency requirements are agreed and confirmed contractually.
- Database and core services in Finland, EU.
- A dedicated telephony instance and SIP address for each operational tenant.
- Private recordings available only through platform authorisation.
- Optional global services assessed before activation.
Secure operations
Every change is versioned, tested and observed.
The platform is published as immutable releases with automated tests, fail-closed validation, health checks and post-promotion verification. Telephony changes use admission barriers so live calls are not exposed to intermediate states.
- Protected backups tested within the operational process.
- Monitoring for API, telephony, recordings and real-time events.
- Audit events and technical signals for incident investigation.
- Secrets outside source code and credentials scoped to each capability.
Protection in layers.
Isolation
Customer-separated data and dedicated telephony for each operational tenant.
Protected voice
SIP over TLS in the mobile app and audio outside the browser; recording only when configured.
Data
HTTPS/TLS, protected sensitive fields, private storage and limited retention.
Detection
Health checks, technical telemetry and auditable events to detect anomalies.
Response
Controlled operational access, scoped investigations and verified recovery.
Security is also a customer decision.
We define access, recording, retention, integrations and residency with you before enabling each capability. To report a vulnerability, use contacto@youring.ai and do not include real personal data.