Security

The technical detail behind our safeguarding commitments.

This page covers the technical implementation. For the policy and compliance view, see Safeguarding & Compliance.

Encryption in transit

All traffic between respondents, field devices, and our servers is encrypted over TLS/HTTPS. There is no unencrypted path into the platform.

Encryption at rest

Audio recordings and transcripts are stored in access-controlled object storage and a managed database, both encrypted at rest by our infrastructure provider.

Infrastructure

VoiceInsights Africa runs on Cloudflare's global edge network (Workers, D1, R2) — the same class of infrastructure used by major global platforms — with Twilio for telephony and messaging delivery.

Role-based access control

Every account has a defined role — organization admin, M&E officer, or system administrator — that scopes exactly what data they can see and act on.

Authentication

Passwords are hashed with PBKDF2 and never stored in plain text. Sessions use signed, time-limited tokens.

Fraud & anomaly detection

Automated checks flag near-duplicate responses and suspicious submission speed on every incoming answer, across every channel.

Legal Compliance

Registered under Tanzania's own data protection law — not just international frameworks.

VoiceInsights Africa Ltd is registered with the Personal Data Protection Commission (PDPC) of Tanzania as a Data Controller, under the Personal Data Protection Act, No. 11 of 2022 — the law that governs how personal data is collected, processed, and protected in Tanzania. This is in addition to designing our systems in line with globally recognized principles such as GDPR.

Registered Data Controller

Registered with Tanzania's PDPC as required by law.

Lawful, Fair Collection

Consent obtained before every interview, on every channel.

Data Minimization

We collect only what's necessary for your research purpose.

No Unlawful Cross-Border Transfer

Data residency handled in line with PDPA restrictions on transfers outside Tanzania.

Data ownership

Your organization owns your data — full stop.

Every response, transcript, and report generated through your account belongs to your organization. VoiceInsights Africa processes it on your behalf and never sells or shares client data with third parties.

Disaster Recovery & Business Continuity

Built on infrastructure designed not to lose your data.

Database Backups

Response data is stored on Cloudflare D1, which maintains automatic point-in-time recovery — your data isn't a single point of failure.

Audio Storage Durability

Voice recordings are stored on Cloudflare R2, built for eleven-nines (99.999999999%) durability with redundancy across multiple facilities.

Global Edge Infrastructure

The platform runs on Cloudflare's global network, not a single server — a regional outage in one location doesn't take the whole platform down.

Incident Response

Security-relevant events (logins, invites, permission changes) are logged to an audit trail your Org Admin can review at any time.

This describes the resilience built into our current infrastructure. A formal, independently-audited disaster recovery runbook with tested Recovery Time/Point Objectives (RTO/RPO) is on our roadmap as we take on larger enterprise and government contracts — ask us for the current status if this is a procurement requirement for your organization.

Methodology & Transparency

How we measure accuracy — and why we don't publish one flashy number.

Many platforms advertise a single headline accuracy percentage. We think that's misleading — accuracy varies by audio quality, background noise, dialect, and channel. Instead, here's exactly how VoiceInsights Africa computes the numbers your own dashboard shows:

Transcription Confidence

Computed directly from OpenAI Whisper's own per-segment log-probability output for every single voice response — not a marketing estimate. You see the real average for your own data in Model Performance.

Fraud Detection

Flags are based on measurable signals — response speed, duplicate phrasing, answer-length anomalies — each visible per-flag in Fraud Alerts, not a black-box score.

AI Analysis

Sentiment and key findings are generated by Claude Sonnet 5 grounded in your own verbatim transcripts — every finding is checked against real data, not templated.

Your Own Live Numbers

Every client sees their own real, current operational stats in-app (Model Performance) — updated live, not a static claim on a website.

We don't yet have enough aggregated production volume across enough clients to publish a statistically meaningful platform-wide benchmark — and we'd rather say that plainly than publish an inflated number. Check our live status page for current platform health.

Need a security questionnaire completed?

We're happy to complete vendor security assessments and NDAs for procurement processes.

Contact Us