Security and compliance
How we protect your data, what we store, and where to find current attestations.
Overview
Aethex is built for production voice workloads. Every byte of customer data is encrypted in transit and at rest, secrets are stored in dedicated key-management systems, and we run continuous internal reviews of our access patterns. This page summarizes our current posture. For up-to-date attestations and audit reports, visit trust.aethexai.com.
Encryption
In transit. Every public endpoint terminates TLS 1.2 or higher. WebRTC sessions use DTLS-SRTP for audio.At rest. All databases, object storage, and message queues use disk-level encryption with platform-managed keys. Sensitive credentials (Twilio auth tokens and webhook secrets) are additionally application-layer encrypted before they touch the database.
Compliance and attestations
We are actively in the process of formal audits for industry-standard certifications. Current status, completed attestations, sub-processor list, and our DPA template are kept up-to-date on our trust portal: trust.aethexai.com.
Reporting a vulnerability
If you believe you have found a security issue, please email [email protected]. We acknowledge reports within 1 business day. Please give us a reasonable window to investigate and ship a fix before public disclosure.