Security at Myelin AI
Your data privacy and security are foundational to everything we build.
Encryption
Hosting, database, and object storage encrypt data in transit and at rest. Cipher suites are the providers' defaults. The application does not set AES-256 or TLS 1.3 itself.
Data Isolation
Organization data is logically separated. Your call recordings and transcripts are never shared across accounts.
Access Controls
Role-based access for Owner, Manager, and Rep. Only authorized team members can view your organization’s data.
Third-Party Security
We partner with trusted providers: Stripe (PCI DSS compliant) for payments, Vercel for hosting, Neon for database infrastructure.
Data Retention
You control your data. Delete recordings and transcripts at any time. Account data is removed upon request.
Monitoring
Application monitoring via Sentry for error tracking. Structured logging for security event auditing.
Infrastructure
We rely on trusted, enterprise-grade providers to keep your data safe and available.
- Hosted on Vercel (enterprise-grade infrastructure)
- PostgreSQL database on Neon (encrypted, automated backups)
- Audio processing via AssemblyAI (SOC 2 Type 2 certified)
- AI processing via the OpenAI API. An enterprise data-processing agreement is not documented in this repository.
Compliance Roadmap
We're committed to formal compliance certifications as we scale.
Questions?
Have security questions? Contact us at jonathan@vmyelin.ai