Security & Compliance

Your company information is just as important to us as our own. Speakap data security guarantees safe and secure data storage - now and in the future.

Here’s how we keep you safe

Trusted by 600+ Industry Leaders (and Counting…)

security

Keeping your information safe, at all times

As a comprehensive employee experience platform, we safeguard sensitive data against evolving cyber threats. With Speakap, you can securely connect with your frontline employees without risking a data breach or exposing sensitive information.

Data centers

The data centers that host Speakap have strict access and storage policies and are ISO 27001 certified against cybersecurity risks. Your data resides either in our data center in the EU or the US. There is no transfer of data between these data centers.

Data encryption

All videos, documents used in internal comms and passwords are sent over secure, TLS 1.2 encrypted connections with a minimum key length of 2048 bits. Your data is encrypted in transit and at rest. Passwords are stored as hashes, using BCrypt algorithm.

Secure coding

Speakap is developed according to industry best practices and measures are taken to prevent vulnerabilities such as those listed in the OWASP Top 10. All changes to Speakap code are peer-reviewed by senior developers.

Bug bounty & Pen tests

We make use of an ethical hacker platform to detect security bugs. An external independent security firm carries out a series of penetration tests annually.

Availability

99.8% up-time guaranteed (scheduled and communicated maintenance periods excluded). All of our critical services are set up redundantly to ensure high availability. Your data is backed up multiple times a day and kept for a month.

Business continuity

We have policies and procedures in place in case of a disaster or a security incident to restore or maintain critical business services.

Want to know more? Get your free copy of our security whitepaper to discover how we handle security.

Download now

Compliance

Confidentiality, integrity and availability are at our core

ISO 27001

Speakap maintains an Information Security Management System and is ISO 27001:2013 certified.

SOC 2 TYPE 2

Speakap has undergone a successful SOC 2 Type II audit by an independent auditor regarding the design, implementation and operational effectiveness of the internal control measures.

CCPA Compliant

Speakap has taken steps to be compliant with CCPA. We will never sell personal data.

HIPAA Compliant

Health Insurance Portability and Accountability Act. Speakap is HIPAA compliant by meeting the requirements of the HIPAA Security Controls. Speakap is classified as a Business Associate (BA) under HIPAA.