Video API Privacy Architecture
The Vonage Video API puts you in control with always-on encryption and GDPR compliance. These and other advanced features meet the needs of privacy-sensitive customers in finance, healthcare, education, and other industries.
Protecting User Information
From designing products to building advanced features—we ensure that the security built into our mature platform always protects user information.
We minimize logging of sensitive information through data sanitization and retention limits
All user authorization and user details are managed by your application
All video streams are protected in transit and at rest with a standard AES-128 and an optional AES-256 encryption
All end user IP addresses are removed from our logs in seven days or less
All recordings are transferred to customer storage as soon as possible and then deleted from our system
Standard security features
Industry standard WebRTCWe leverage WebRTC, the most robust and widely used real-time video protocol. WebRTC is backed by global open standards organizations for industry consensus and a developer community that responds rapidly to security challenges.
Always-on AES-128 encryptionAll voice, video, and signaling traffic flowing through the Vonage Video API platform is encrypted in transit and at rest. AES-256 encryption is also available.
User IP address deletionAll IPs are guaranteed to be deleted from the Vonage platform within seven days.
Account dashboard and insightsAuthenticated users can monitor your Video API account and project metrics to help ensure the integrity of your applications.
Built on AWSWe leverage AWS end-to-end capabilities to maintain the highest level of infrastructure security.
Advanced security features
(Enabled as needed for your application)
Regional media isolationWe maintain compliance by restricting media traffic to regional media zones for the U.S., EU, Australia, Canada, Germany and Japan. EXPLORE REGIONAL MEDIA ZONES
Additional recording encryptionAll video recordings can be protected with AES-256 encryption in transit and at rest to maintain deeper security. Explore encryption
Session analyticsConveniently access Advanced Insights analytics to discover and diagnose security exposure. Explore Advanced Insights
EU proxyAs part of the EU and Germany RMZ, all end user IP addresses can be masked to meet strict privacy requirements. Explore EU Proxy
Advanced firewall controlEnterprises can configure firewalls with “allowed IP” ranges or deploy their own servers for proxying through firewalls. EXPLORE ALLOWED IP
Two-Factor Authentication (2FA)For additional security of your application, you can deploy our Verify API and 2FA solution for your customers. Explore 2FA
Vonage experts are ready to help
The global Enterprise Services team provides privacy and security expertise from the project start to help guide success.