Security is not an afterthought.

Enterprise-grade security built into every layer. SAML SSO, MFA, audit logging and granular access controls, all included with every licence.

Start free trial Security docs14 days · full access · no card

SAML 2.0 SSO, any provider
Configurable MFA: TOTP, hardware keys
50+ permissions
Data residency by region

Sheet 1Security and compliance · What it does · Included in every plan

What it does

Security and compliance

Built for organisations that take security and compliance seriously.

Identity, access, audit and residency, on every plan.

SAML SSO: Integrate with your identity provider. Support for Okta, Azure AD, Google Workspace and any SAML 2.0 provider.
Configurable MFA: Enforce multi-factor authentication with support for TOTP authenticator apps and hardware security keys.
Audit logging: Complete audit trail of every action. Exportable logs for compliance reporting and security reviews.
50+ permissions: Fine-grained role-based access control. Define exactly who can transmit, record, manage and audit.
Data residency: Choose where your data lives. Multi-region deployment options for compliance with local regulations.
Access reviews: Periodic access review workflows. Ensure the right people have the right permissions over time.

Allowance

Every plan

Included with every licence. No enterprise tier required.

Encryption: TLS 1.3 in transit · AES-256 at rest
SSO: SAML 2.0, IdP-initiated flow
MFA: TOTP · hardware keys
Permissions: 50+, role-based

See pricing

Checklist

Compliance

The security and compliance checklist.

Security and compliance

SAML 2.0 SSO with IdP-initiated flow
TOTP and hardware key MFA
Encryption in transit (TLS 1.3)
AES-256 encryption at rest
Complete audit logging with export
SOC 2 Type II ready architecture
GDPR and CCPA compliance controls
Data residency region selection
Periodic access review workflows
IP allowlisting and session controls
Immutable incident records supporting Martyn's Law obligations
MiFID II-aligned voice recording retention

End of sheet 1Back to the top

Enterprise security without the enterprise complexity.

This page covers information security. For physical security operations, see incident management.

Every feature on this sheet ships with every plan.

One plan for everyone who runs whoot.; two-way SMS priced by the size of the list; Trader Voice for trading floors that need compliance-grade recording.

See pricing All features

The other feature pages

Voice · Recording · Transcription · PSTN · Analytics

Voice

Rooms that never close.

Always-on push-to-talk rooms: the channel that is already open when an incident starts. No meetings, no scheduling, no set-up time.

Voice · Push-to-talk · Latch · Presence

Voice rooms

Recording

Every word, archived.

Full room recording with incident replay and speaker identification: the documented, demonstrable record for after-action reviews and regulated industries.

Recording · Replay · Speaker ID · Retention

Recording and replay

Transcription

Voice to text, in real time.

Real-time speech-to-text powering the incident record: searchable transcripts, entity extraction, 30+ languages, and AI summaries of what was said while it was happening.

Transcription · 30+ languages · Search · Summaries

AI transcription

PSTN

Call anyone, from any room.

Call any phone number from your whoot. rooms, or give every room its own phone number so anyone can dial in. The phone network, both ways.

PSTN · Dial-out · Dial-in · 40+ countries

PSTN calling

Analytics

Insights that drive action.

After-action reporting, usage dashboards, call quality metrics and AI-powered insights: measure the response, not just the platform.

Analytics · Call quality · Usage · Reporting

Analytics and insights

Sheet 2Sign-off

Today

You

Security your IT team will approve.

All security features are included with every licence. No enterprise tier required.

Start free trial Security docs

14 days · full access · no card

Built for organisations that take security and compliance seriously.

Identity, access, audit and residency, on every plan.

SAML SSO

Integrate with your identity provider. Support for Okta, Azure AD, Google Workspace and any SAML 2.0 provider.

Configurable MFA

Enforce multi-factor authentication with support for TOTP authenticator apps and hardware security keys.

Audit logging

Complete audit trail of every action. Exportable logs for compliance reporting and security reviews.

50+ permissions

Fine-grained role-based access control. Define exactly who can transmit, record, manage and audit.

Data residency

Choose where your data lives. Multi-region deployment options for compliance with local regulations.

Access reviews

Periodic access review workflows. Ensure the right people have the right permissions over time.

The security and compliance checklist.

Security and compliance

SAML 2.0 SSO with IdP-initiated flow
TOTP and hardware key MFA
Encryption in transit (TLS 1.3)
AES-256 encryption at rest
Complete audit logging with export
SOC 2 Type II ready architecture
GDPR and CCPA compliance controls
Data residency region selection
Periodic access review workflows
IP allowlisting and session controls
Immutable incident records supporting Martyn's Law obligations
MiFID II-aligned voice recording retention