Founded in 2025
Trust Center.
ThunderPhone is HIPAA and GDPR compliant, with documented controls, automated monitoring, and continuous policy enforcement.
GDPR CompliantHIPAA CompliantUK GDPR Compliant
Compliances.
Documented, audited, and continuously enforced across the stack.
Compliant
GDPR
Compliant
HIPAA
Compliant
UK GDPR
Controls.
Security controls across product, data, network, application, endpoint, and corporate domains — monitored continuously.
Product security
- And approves the list of people with access to
- That access to the production databases is
- That the production databases access and
Data security
- Information security and privacy training to staff
- Assigns the role of Information Security
- Logical access
Network security
- Guidelines to manage communications
App security
- That all staff members with access to any
- Identifies vulnerabilities on the Company
- Infrastructure cloud provider login sessions
Endpoint security
- Develops, documents, and maintains an
- Policies and procedures for endpoint security
- That all critical endpoints are encrypted to
Corporate security
- Policy to define behavioral standards and
- Organizational structure to define authorities
- Established procedures to communicate with
Resources.
Policies and documents, available on request.
Acceptable Usage PolicyAvailable by request
Access Control PolicyAvailable by request
Access Control ProcedureAvailable by request
Asset Management PolicyAvailable by request
Asset Management ProcedureAvailable by request
Business Continuity & Disaster Recovery PolicyAvailable by request
Subprocessors.
The vendors that help run ThunderPhone, each under a data processing agreement.
Microsoft AzureCloud infrastructure
LiveKitCommunications infrastructure
TelnyxTelephony
GoogleCloud and artificial intelligence
StripePayments+ 19 more subprocessors — full list available in the DPA.