Security

Infrastructure and safeguards

DingVoice uses Google Cloud Platform for hosting, databases, and storage. Our safeguards include authenticated service access, workspace authorization, encrypted network connections where supported, and cloud provider storage protections. The measures applicable to customer personal data are also described in the DPA.

The appropriate measures depend on processing risks and service configuration. This page does not certify a particular encryption version, audit standard, or regulatory status, or promise uninterrupted service or complete prevention of data loss. Ask security@dingvoice.com about requirements material to your intended use before relying on them.

Access and customer responsibilities

Application access uses authentication and company membership checks to scope workspace data. Customers should restrict invitations and permissions, protect credentials and devices, promptly remove former users, and review integrations and exports. Maintain independent copies of records and verify that your recovery arrangements meet business and legal needs.

For personal data processed on customers' behalf, the DPA requires access limited to authorized personnel under confidentiality duties and security measures appropriate to the risks. Report unexpected access or data exposure promptly so we can investigate.

Payments

Payment details are handled through providers such as Stripe, RevenueCat, Apple, or Google according to the purchase channel. DingVoice stores subscription and billing references rather than full payment card numbers. Do not upload card security codes or full card details into accounting notes or documents. Use of a payment provider is not a claim that DingVoice has a particular PCI certification or assessment status.

Reporting issues and incidents

Report security concerns to security@dingvoice.com with the affected feature, timing, and information needed to reproduce the issue; avoid sending unnecessary personal data or active credentials. Do not access other customers' data or disrupt the service while investigating.

Jscriptech, MB, V. Nagevičiaus g. 3, Vilnius, Lithuania, is responsible for DingVoice. We assess reported incidents and meet applicable notification duties; processor breach notifications are governed by the DPA. There is no separate response-time or availability SLA unless agreed in writing.