Security
How VereTel protects your call data
What we do to keep your calls private, described plainly. We only list what is actually in place.
Encrypted connections
The website and the desk are served only over HTTPS, through Cloudflare. Plain HTTP requests are redirected to HTTPS, and our servers accept web traffic only from Cloudflare’s network.
Each customer’s data kept apart
Every customer’s calls are separated from every other customer’s at the database level, using PostgreSQL row-level security. Each request for call data runs pinned to one customer, and the desk also checks that the signed-in person belongs to that customer. The application connects to the database with a limited role that can read and write records but cannot change the database’s structure or its security rules. More about data separation.
Sign-in
- You sign in with your email address and password on the VereTel sign-in page, not on this website. Our public site never asks which business you belong to and never reveals who uses VereTel.
- Passwords are stored as salted hashes, never as the password itself.
- You choose your own password when you create your account.
- Repeated failed sign-in attempts are slowed down automatically.
- Users can sign out of every device at once.
Call data from the carrier
The phone carrier reports each call to VereTel, and every report’s digital signature is checked before it is accepted, so call records cannot be forged by someone pretending to be the carrier.
What we keep
VereTel does not record calls today, so the desk holds call details (caller and tracking numbers, times, durations and outcomes), not what was said. The service is hosted in the United States and backed up nightly with encrypted backups stored away from the server.
Monitoring
Automated checks run every minute on the pipeline that records and bills calls, and alert our team when something looks wrong. What we monitor.
What we do not claim. VereTel has not completed a third-party security audit or certification, and we do not claim HIPAA compliance. We would rather tell you that directly than let a badge imply it.
Security questions
Is VereTel SOC 2 certified or HIPAA compliant?
VereTel has not completed an independent audit such as SOC 2 and does not claim HIPAA compliance. If you need a security questionnaire answered, email us and we will answer it factually.
Does VereTel store call recordings?
No. VereTel does not record calls today. The desk holds call details such as numbers, times and durations, not conversations.
Where is my data hosted?
The VereTel service is hosted in the United States.
How do I report a security issue?
Email info@veretel.com with the details. Please do not include personal information about other people.
Look around for free, or see it on a call
Create a free account and see the desk for yourself. Prefer to talk first? A 30-minute demo is optional: we walk through the numbers, the forwarding and the desk with your business in mind.