Security and compliance
you can put in front of your CISO.
SOC 2 Type II, PCI-DSS, ISO 27001 and STIR/SHAKEN — on every plan, with no upgrade required.
The compliance stack — verified, audited, current.
Every plan includes every certification. No "Enterprise-only" tiers for the basics.
SOC 2 Type II
Annual independent audit of our security, availability and confidentiality controls. Report available under NDA on Professional and above.
PCI-DSS
Voice capture with automatic redaction of card numbers. Tokenization on payment fields. Quarterly ASV scans.
ISO 27001
Information security management system certified to ISO 27001:2022. Re-audited annually.
STIR/SHAKEN A-Attestation
Every outbound US call is signed with full A-level attestation. Reduces spam-flagging and improves answer rates.
How the platform is built.
Encryption
- TLS 1.3 in transit
- AES-256 at rest
- End-to-end encrypted voice (SRTP)
- Customer-managed keys (Enterprise)
Data residency
- USA, EU and India regions
- Pin recordings to a region
- EU recordings stay in EU
- Data residency add-on for Enterprise
Network
- Tier-1 carrier interconnects
- Multi-region failover, 99.999% SLA
- DDoS mitigation at edge
- STIR/SHAKEN signing on every call
Identity
- SSO via SAML 2.0
- SCIM 2.0 for user provisioning
- MFA enforced for admins
- Session-bound device fingerprinting
Reports your security team will ask for.
Skip the back-and-forth. Email info@mycountrymobile.com for an NDA-ready package.
SOC 2 Type II report
Annual third-party audit. Available under NDA.
Sub-processor list
Current third-party processors and their region.
Data Processing Addendum (DPA)
GDPR, UK GDPR and CCPA-aligned. Auto-attached to MSA.
Penetration test summary
Most recent third-party pen test report.
Security questionnaire (CAIQ)
Cloud Security Alliance CAIQ — pre-filled.
Explore more on the platform
PCI-DSS calling for financial services
Tokenized payment voice capture, SOC 2 reporting, FINRA-friendly retention.
Enterprise-IT-grade controls
SOC 2 Type II, ISO 27001, GDPR EU residency, SSO and SCIM for 500+ seat deployments.
Enterprise contact center
SSO, SCIM, 99.999% SLA and custom data residency for 500+ seat deployments.
Need to satisfy procurement?
Request our pre-filled security questionnaire, BAA and SOC 2 report. We'll send the bundle within one business day.