Moving from 3CX, Metaswitch, BroadWorks, FreePBX or Switchvox? NCS runs beside it while you move. See how

Security and compliance

How data is protected and how the platform carries your obligations.

How is our data protected?

Stored data is encrypted with AES-256. Signaling and media are protected in transit between the apps and the platform. Every console uses role-based access control, and fraud detection runs inside the platform.

Where is our data stored?

Where you deploy NCS. When it runs on your infrastructure, your customers' calls, messages and recordings stay there, not with us.

Can we meet GDPR and HIPAA obligations on NCS?

NCS is built to operate under them: encryption at rest and in transit, access by role, recording policy per tenant, and data on infrastructure you control. Certification belongs to a specific deployment, so bring your framework to the scoping call and we will go through it control by control.

How is call recording controlled?

Recording can be switched on for a whole company or per user. On contact center queues, callers can ask not to be recorded, and card numbers are redacted from transcripts automatically. Recordings are stored under the same encryption as everything else.

What about toll fraud?

Fraud detection and alerts run inside the platform, so unusual calling patterns are flagged before they become a bill.

How is consent handled for campaigns?

A consent confirmation is required before any Broadcast campaign is created, every email gets an unsubscribe footer automatically, and sends are scheduled in the timezone you choose.