whoot is built with security at every layer — from encrypted voice streams to database-level access controls. Your conversations stay private, your data stays protected.
Multiple independent layers of security protect your data at every stage — in transit, at rest, and at the point of access.
Every byte of data moving between your devices and our infrastructure is encrypted using TLS 1.3 — the latest and most secure transport protocol.
All stored data — including voice recordings, transcriptions, and workspace metadata — is encrypted at rest using AES-256. Your data is unreadable without the correct keys, even at the storage layer.
We enforce TLS 1.3 across all connections. This ensures forward secrecy, faster handshakes, and protection against known downgrade attacks.
Our Postgres database enforces Row Level Security policies, ensuring that every query is scoped to the authenticated user's permissions. Data isolation between tenants is enforced at the database level — not just in application code.
Choose where your data lives. We support configurable data residency so your organisation can meet regional compliance requirements including GDPR. Your voice data, recordings, and metadata stay in the region you choose.
All billing and payment processing is handled by Stripe, a PCI DSS Level 1 certified payment processor. We never store card numbers, CVVs, or sensitive payment credentials on our servers.
Fine-grained permissions let workspace owners control exactly who can do what. From room access to admin settings, every action is gated by role. Assign Owner, Admin, or Member roles — and audit every change.
Add a second layer of protection to every account. whoot supports TOTP-based multi-factor authentication, so even if a password is compromised, unauthorised access is blocked.
Your data is continuously backed up with point-in-time recovery. Automated daily backups are retained and encrypted, ensuring business continuity and protection against data loss.
From financial services to healthcare operations, whoot is designed to meet the security expectations of the most demanding environments.
Our team is happy to walk through our security architecture, compliance posture, or answer any questions your InfoSec team may have.