Security
Trusted with theconversations that matter.
Customers share card numbers, health details and travel plans with your agent. Here is how Vesper keeps that information protected, private and under your control.
Compliance
Independently audited.Continuously monitored.
Our controls are reviewed by outside auditors every year, and the reports are available to customers and prospects under NDA.
SOC 2 Type II
Independently audited security, availability and confidentiality controls.
HIPAA
Safeguards for handling protected health information.
GDPR
Data protection and privacy for people in the European Union.
ISO 27001
The global standard for information security management.
Data protection
Private by default.
The protections below are on for every customer, on every plan, from the first conversation.
Encrypted everywhere
Every conversation is encrypted in transit with TLS 1.2 or higher and at rest with AES-256, including recordings and transcripts.
Your data trains nothing else
Customer conversations improve your agent only. They are never used to train shared models or anyone else's agent.
Data stays in your region
Choose where conversations are processed and stored, in the European Union or the United States.
Access you control
Single sign-on, automatic user provisioning and role-based permissions decide exactly who can see what.
Sensitive details masked
Card numbers, government IDs and health information are redacted automatically from transcripts, logs and analytics.
Retention on your terms
Keep transcripts for as long as your policies require, then have them deleted on a schedule you set.
Agent guardrails
Checked beforeit acts.
An agent that can issue refunds and change bookings needs firm boundaries. Vesper enforces yours on every single action, and hands over to a person, with the full conversation, whenever it should.
Step 01
Identity first
The agent verifies who it is talking to before it reads or changes anything on an account.
Step 02
Policy check on every action
Refunds, cancellations and changes are checked against your rules before they happen, never after.
Step 03
Limits that hold
Spending caps, approval thresholds and topics the agent must never handle are enforced on every conversation.
Security reviews
Running a vendor assessment?
We share audit reports, our completed security questionnaire and architecture details, usually within two business days.
Found a vulnerability? Tell us through the contact page with the topic set to Something else, and our security team will respond quickly. We do not pursue researchers who report in good faith.
Contact the security team