Oration achieves ISO 27001, SOC 2 Type 2, and GDPR
We're thrilled to share that Oration has achieved ISO 27001:2022 certification, SOC 2 Type 2 compliance, and GDPR compliance. This triple certification shows our dedication to keeping your data secure and protected.
TL;DR
A comprehensive security framework
Security isn't just a checkbox for us—it's woven into everything we do. Our triple certification proves we're serious about protecting your data at every level.
ISO 27001:2022 certification
Our ISO 27001:2022 certification means we have a solid Information Security Management System (ISMS) that includes:
- Thorough risk assessment and management
- Strong asset management and protection
- Careful access control measures
- Clear incident response procedures
- Regular improvement processes
SOC 2 Type 2 compliance
We've maintained SOC 2 Type 2 compliance for the last six months, showing our security controls work effectively day after day. This covers:
- Security
- Availability
- Processing integrity
- Confidentiality
- Privacy
GDPR compliance
Our GDPR compliance means we handle your data with the highest privacy standards, including:
- Clear data processing
- Strong data subject rights
- Solid data protection measures
- Transparent data breach notification procedures
Why this matters for our customers
We know that trust is earned through transparency, reliability, and a genuine commitment to your security. Our triple certification—ISO 27001:2022, SOC 2 Type 2, and GDPR compliance—reflects our promise to protect your data and respect your privacy at every step. These certifications aren’t just badges; they’re a signal that you can count on us to keep your information safe, meet the highest global standards, and support your business with confidence. With these certifications, you can expect the following:
- Enterprise-grade security: Multiple layers of independently verified security controls
- Global compliance: Adherence to worldwide security standards
- Comprehensive protection: Coverage across all aspects of information security and data privacy
- Continuous verification: Regular audits and improvements to maintain high security standards
- Most importantly, peace of mind when you work with us
The road to certification
Getting these certifications wasn't easy. We went through rigorous audits conducted by independent third-party auditors, thoroughly reviewed our security practices, implemented stronger security controls, and set up continuous monitoring and improvement processes to ensure ongoing protection.
Looking forward
As we continue building autonomous voice AI, security remains our top priority. We are committed to updating our security measures to address new threats, staying compliant with evolving security standards, protecting your data at the highest level, and setting new standards in AI security.
To learn more about our security measures, visit https://trust.oration.ai.
Key takeaways
- Triple certification is independently audited, not a marketing checklist.
- SOC 2 Type 2 covers security, availability, processing integrity, confidentiality, and privacy.
- GDPR adds data-subject rights, processing transparency, and breach notification.
- Security stays a continuous program: monitoring, audits, and updates as threats change.
Frequently asked questions
What security certifications does Oration have? ISO 27001:2022, SOC 2 Type 2, and GDPR compliance.
What's the difference between SOC 2 Type 1 and Type 2? Type 1 describes controls at a point in time. Type 2 tests that those controls worked over a sustained period. Oration holds Type 2.
Where can customers review Oration's security posture? The trust portal at https://trust.oration.ai.
Why do these certifications matter for AI voice agents? Voice agents handle sensitive customer data on live calls. Independently verified controls are what procurement and security teams require before production.
