Security & Privacy Architecture

Your meeting, your data.

Audio stays on your machine; transcripts go to your portal, or nowhere with a BAA. Attendee details are encrypted with AES-256-GCM, and voice samples delete automatically after 7 days.

Talk to our team Start your free 60 minutes

EV code-signed Windows app · DPAPI key protection · TLS in transit

Where your meeting data goes

TLS 1.3 / AES-256-GCM

Your Windows PC (Operator) Local Storage

Audio recordings stay on local disk, always. API keys DPAPI-encrypted.

Your Customer Portal Encrypted in transit

Transcripts, session logs and performance telemetry upload here after each meeting to build The Honest Report.

Nothing Uploaded BAA Mode

With a BAA, no meeting data uploads and no attendee details are stored.

Where your data lives

With a BAA, nothing leaves your machine.

Unlike cloud conferencing platforms that upload, index, and retain raw audio on third-party servers, audio recordings always stay with the operator. Transcripts and session logs upload only to your own portal to build The Honest Report — unless you're on a BAA, in which case nothing from the meeting is uploaded at all.

Per-language audio recordings stay entirely on your local machine, with or without a BAA.
SRT and VTT subtitle files generated and saved locally, then sent only to your own portal for the report.
With a BAA, no meeting data — transcripts included — ever reaches our cloud.

Technical safeguards

Engineered for privacy at every layer.

Every security control is built directly into our software and verified in our production pipeline.

AES-256-GCM

Encrypted attendee details

Attendee personal details are encrypted using AES-256-GCM with a keyed blind index for counting. No unencrypted attendee logs or personally identifiable records exist in our databases.

Keyed blind indexing enables attendance reporting without exposing personal identities.

Zero Storage

BAA mode

In BAA mode, Intravo stores absolutely no attendee details and strictly refuses voice enrolment. Ideal for healthcare sessions, clinical advisory boards, and high-sensitivity discussions.

Enforces strict zero-retention rules across all session channels and attendees.

7-Day Purge

Automatic voice deletion

When Voice Preservation is used, voice samples are automatically deleted after 7 days by the server on its own clock via an hourly purge. Deletion is confirmed with the provider, and consent records are preserved.

Readings are verified against scripts so an unauthorized recording cannot enrol a speaker.

Windows DPAPI

DPAPI-protected keys

API keys stored in the desktop application are encrypted per user by the Windows Data Protection API (DPAPI). Even with physical access to the machine, other user accounts cannot extract credentials.

OS-level cryptographic security bound directly to the active operator user profile.

Single-Use

Short-lived credentials

Premium speech synthesis uses short-lived, single-use credentials minted per session. Long-term static keys are never exposed over network requests or stored on client devices.

Credentials expire automatically when the meeting ends or connection disconnects.

Google / Microsoft

Operator Single Sign-On

Centralize access with Google or Microsoft SSO. Automatic user provisioning by corporate email domain, with granular agency and client account boundaries for complete tenant isolation.

Manage operator access through your existing identity provider policies and multi-factor auth.

EV Signed

Code-signed Windows app

The Intravo Windows operator app is signed with an Extended Validation (EV) certificate issued directly to Intravo Corp. Windows SmartScreen validates application integrity prior to execution.

Automatic self-updates run seamlessly and the engine rides through dropped connections.

TLS Transit

Encrypted in transit

All network traffic between the Windows operator console, our synthesis pipeline, and attendee devices is encrypted in transit using industry-standard TLS protocols.

No unencrypted audio or caption feeds are ever broadcast over open channels.

The Honest Report

Verifiable reporting

Following every meeting, The Honest Report provides an auditable breakdown of performance: measured delay per language against the 12-second target and all words corrected in flight.

Downloaded directly as print-ready HTML and CSV files for post-event compliance review.

Have questions about our security architecture?

Our team is available to review your security requirements, run through architecture details, or assist with compliance inquiries.