Yes, for every customer. Standard Contractual Clauses and a Data Processing Agreement covering GDPR and UK GDPR are available on request, no negotiation required for the standard terms.
Trust & Compliance
We Secure, Encrypt & Protect Every Conversation
Encryption everywhere, SSO out of the box, and an audit trail streamed straight to your SIEM. The hard stuff, already done.
Standards & regulations
STIR/SHAKENGDPR
rozper.com/security
Security posture · Live
Every layer, encrypted.
100%
Encryption coverage
TLS 1.3 · AES-256
How we protect you
Unlock trust with our security controls.
We treat security the way we treat the carrier network underneath Rozper — as critical infrastructure, monitored every second, audited by people who don't work for us.
Encryption everywhere
TLS 1.3 in transit, AES-256 at rest, SRTP leg-by-leg — keys rotate automatically.
Encrypted100%
TLS 1.3SRTPAES-256
Carrier-grade infrastructure
Redundant points-of-presence, active-active failover, isolated tenant data.
US-EastActive
EU-WestActive
APACActive
Access controls
Least-privilege by default — SSO, SCIM, granular roles, and a fully audited action log.
Team access
AAdminFull access
AAgentScoped
AAuditorRead-only
AAPI keyScoped
Continuous assurance
Quarterly pen tests, weekly dependency scans, and a live bug bounty program.
Carrier & call protection
Every call authenticated at the carrier level, with dynamic emergency routing.
STIR/SHAKENAttested
E911 routingActive
Compliance
Privacy law, in writing.
Request our Data Processing Agreement and Standard Contractual Clauses through your account team.
GDPR · UK GDPR
DPA + SCCs on request.
CCPA / CPRA
California consumer rights.
Sub-processors
Who touches your data.
The short list. The full register, with regions and contract tiers, is in the customer console.
Provider
Purpose
Region
AWS
Compute & storage
US · EU · APAC
Cloudflare
Edge & WAF
Global
Twilio Networking
Number inventory
Global
Stripe
Billing & payments
US · EU
Data residency
Pick a region. Stay there.
Choose where your tenant lives at signup. Recordings, transcripts, and CDRs are pinned to that region — including backups.
- US, EU, and APAC regionsActive-active across three AZs each. Pinning is enforced at the storage layer, not just the routing layer.
- On-prem session border controlOptional. Customer-deployed SBC for regulated traffic patterns.
- Tenant-level encryption keysBYOK with AWS KMS, GCP KMS, or HashiCorp Vault on Enterprise.
Trust & Compliance
Questions before you sign the DPA.
Security shouldn't be a paid add-on.
Every plan ships with the same audited controls, encryption, and carrier-grade protection — no security tier to upgrade into.