01
Certified management systems
ISO 27001:2022 for information security and ISO 9001:2015 for quality management, with annual surveillance audits.
Legal
Data Security & Compliance
Every conversation runs on infrastructure certified to ISO 27001:2022, ISO 9001:2015, and SOC 2 Type II, with India data residency and TRAI-aligned consent handling.
ISO 27001:2022
Information security
ISO 9001:2015
Quality management
SOC 2 Type II
Independently audited
India
Data residency
Controls
How the platform is secured
02
SOC 2 Type II
Independently audited controls covering security, availability, and confidentiality over an observation period.
03
India data residency
Conversations, transcripts, and derived data remain in Indian data centres with encrypted storage.
04
PII protection
Redaction of sensitive fields in recordings and transcripts, with role-based access and full audit logging.
05
TRAI alignment
DND scrubbing, calling-window enforcement, and number reputation management built into the calling layer.
06
Continuous assurance
Quality and compliance audits across 23 parameters on the full call base, with regression alerts.
Regulatory alignment
Our controls are designed so that regulated customers can deploy voice agents without weakening their own compliance posture. We support customer-side obligations rather than replacing them.
- Digital Personal Data Protection Act, 2023 — consent capture, purpose limitation, retention control, and grievance handling
- RBI outsourcing and fair practice expectations — auditable recordings, approved language, and escalation paths
- TRAI commercial communication rules — DND compliance, calling windows, and number hygiene
- Sector-specific requirements such as IRDAI and SEBI conduct rules, configured per deployment
Requesting documentation
Certificates, audit summaries, penetration test attestations, and our security review pack are available under NDA. Write to support@rubicsolution.in and we will route the request to our security team.
Need our security pack for a vendor review?
We will share certificates, audit summaries, and a completed security questionnaire under NDA.