Security, Privacy and Compliance
Vocal Video is built to keep your videos, your respondents' details and your account data secure and private. This article summarizes our certifications and compliance programs. For our policies, security documentation and the latest details, visit the Vocal Video Trust Center.
In this article:
Certifications
- ISO 27001: the international standard for information security management.
- ISO 27701: the international standard for privacy information management, which extends ISO 27001 to personal data.
Privacy laws and data transfers
- GDPR (EU) and CCPA (California): Vocal Video complies with both.
- Data Privacy Framework: Vocal Video participates in all three Data Privacy Framework programs: the EU-U.S. Data Privacy Framework, its UK Extension, and the Swiss-U.S. Data Privacy Framework. These govern how personal data moves from the EU, UK and Switzerland to the United States.
People who record through your video collectors do so under our terms of use, which each collector summarizes in plain English, and on Pro plans and above you can add your own custom release. See Overview: Standard vs. Custom Video Releases.
Healthcare and HIPAA
Healthcare organizations use Vocal Video to collect patient and clinician stories. On Enterprise plans, we sign a Business Associate Agreement (BAA) with organizations that need one for HIPAA compliance. See HIPAA Compliance.
Frequently asked questions
Is Vocal Video SOC 2 certified?
Vocal Video is hosted on AWS, which is SOC 2 certified. Vocal Video itself is certified to ISO 27001 and ISO 27701, the international standards for information security and privacy management.
Where can I get security documentation for a vendor review?
Start at the Vocal Video Trust Center. For a security questionnaire or anything not covered there, contact support@vocalvideo.com.
Can you sign a BAA?
Yes, on Enterprise plans. See HIPAA Compliance.
For more information see:
Still need help? Contact Support at support@vocalvideo.com