Security

Security is not a feature. It's the foundation.

From encryption to compliance, Sunesis Labs is built so enterprise teams can deploy voice and video AI with confidence.

SOC 2 Type IIAnnually audited

GDPREU data protection

HIPAA-readyBAAs on Enterprise

ISO 27001In progress

Controls

How we protect your data

Encryption in transit & at rest

TLS 1.3 everywhere; AES-256 at rest. Keys rotated automatically.

Key management

Customer-managed keys available on Enterprise via your own KMS.

Data residency

Choose your region. EU, US, and APAC data stays where you put it.

Audit logs

Every API call and dashboard action is logged and exportable.

Annual penetration testing

Independent third-party pentests, every year, with remediation.

Isolated tenancy

Dedicated infrastructure for workloads that need physical separation.

Data lifecycle

You stay in control at every stage

You send it

Data is encrypted the moment it leaves your app and scoped to your tenant alone.

We process it

Used only to serve your request. Never pooled with other customers, never sold.

You retire it

Set retention windows, export in standard formats, or purge on demand, anytime.

Our practices

No vendor lock-in, your data is exportable in standard formats at any time.
We never train foundation models on customer data without explicit, written consent.
Role-based access control with least-privilege defaults across the dashboard.
Responsible disclosure program for security researchers.
99.99% uptime SLA on Enterprise with multi-region failover.

Security questions?

Speak with our security specialists about your specific requirements.

Contact sales Read the docs

SOC 2 Type II · GDPR · HIPAA-ready · No vendor lock-in