Security

MacOS security

MacOS applications are designed for use on 10.12+. All macOS applications are protected by Apple Notarization.

iLok

iLok License Manager is used to protect our software. Activation to a computer, the iLok USB Smart Key, or the iLok Cloud, requires an Internet connection. The iLok Cloud requires a constant Internet connection while the licensed software runs. Users may transfer licenses or allocated them via their own accounts.

Encryption

All of our servers are within our own virtual private cloud (VPC) with network access control lists (ACL’s) that prevent unauthorized requests getting to our internal network. We have data encryption in TRANSIT, meaning all our data in the database, underlying storage, backups, replicas and snapshots are encrypted.

Multi-factor Authentication

Multi-factor authentication (MFA) is a security technology that gives our clients the option to keep their accounts secure. We implemented it across VoiceQ Cloud using an email system for accessing the application. Please note: MFA is not available in some European territories.

Privacy

VoiceQ Cloud is a private content platform. Your content is only available to whom you decide is on your team and whom you share it with. It will not be used for anything except the explicit purpose of your use.

Trusted, compliant cloud

AWS provides services that help you protect your data, accounts, and workloads from unauthorized access.

Automated timeout

When a user leaves their browser open it can be vulnerable in the wrong hands. Our system logs the user out after user inactivity and requires the user to login.

Network security

Our firewalls allow access only to traffic we expect, and our platform is protected by built-in AWS safeguards (see AWS Network Security).

Top rated SSL

VoiceQ Cloud uses Qualys SSL ratings systems to assess our security ratings. Our site recently scored an "A" rating for security. Please note: That ratings may differ depending on our protocol support.

TPN Certification

KIWA Digital Ltd is now TPN certified for Blue Shield security. Please contact our team if you wish to view our security policies including:

• Data protection policy
• Data retention policy
• Governance, Risk, and Compliance (GRC)
• Identity Access Management (IAM)
• Information Security Management System (ISMS)

VoiceQ Cloud (Browser)

VoiceQ Cloud is an online dubbing and translation application that utilizes secure media to protect user data and intellectual property. To ensure the highest level of security for its users, VoiceQ Cloud has implemented a set of security policies and best practices.

The security policies for VoiceQ Cloud include: 

• TPN Certification
• User authentication
• Data encryption
• Secure cloud infrastructure
• Auditing and monitoring
• Regular updates and patches

Whitelisting VoiceQ Cloud servers

Web access

To allow access to VoiceQ Servers we made it simple.

1. Allow access to https://app.voiceqcloud.com/

2. Your administrator should allow this site access with open access to all extensions from this URL.

For AWS permissions please use:

- http://voiceqcloud-prod-ami2.eba-qp3ydnkm.us-west-1.elasticbeanstalk.com/

Please note: the extension via AWS is not private (https) as we add our privacy certification once the user clicks through via a browser and is unique to each user.

S3 access

There is no public access to our S3 servers due to the level of security we have operating on the system. All access is managed by our internal security servers which allows us to encrypt all data stored both database project (script/character data) and media files uploaded to our servers.

Emails

You need to allow emails to/from - no-reply@voiceq.com this will allow you to receive emails from our system for MFA access, password rests, assignment to teams, general support and other automated emails from our systems.

General security

Phishing is used by cybercriminals pretending to be a legitimate website or person. Their goal is to get you to disclose sensitive personal information, such as usernames, passwords and credit cards, or install malware by inviting you to visit fraudulent websites or click on links in emails and messages.

Please use caution when opening suspicious emails or clicking on links or visiting web pages if you think the message may be fake or coming from an untrustworthy sender.

- Only use your log-in credentials on VoiceQ Cloud's official website(s) – https://app.voiceqcloud.com/

If you suspect someone is impersonating VoiceQ support or sales, please contact us and we’ll verify the authenticity of the message or website.

Be aware of warning signs of a typical phishing message:

• Offer seems too good to be true
• Return sender information is not an @voiceq.com or @kiwadigital.com email address
• Message is not addressed to you personally
• Message contains spelling errors or grammar mistakes
• Message asks for your personal or financial information

Kiwa Digital/VoiceQ is proud to have an engaged and aware community of customers and users around the world. We appreciate your vigilance and help in keeping you, VoiceQ and our entire community safe from cyber threats.

Q&A

What measures are in place to protect user data?

VoiceQ Cloud uses encryption protocols to secure user data and employs security best practices to protect user accounts and projects. The application also has role-based access control and multi-factor authentication to limit access to authorized users.

What kind of security audits are performed on the application?

VoiceQ Cloud undergoes regular security audits to ensure the application is following industry best practices and is compliant with relevant regulations. Audits can include penetration testing, vulnerability assessments, and security code reviews.

How is data protected in transit?

VoiceQ Cloud uses SSL and TLS protocols to encrypt data in transit between the user's device and the cloud server. This protects data from interception by unauthorized parties.

What happens in the event of a security breach?

VoiceQ Cloud has an incident response plan in place to address security incidents or breaches. The plan includes procedures for identifying and containing the incident, conducting a forensic investigation, and notifying affected users and authorities as necessary.

What happens to user data after an account is deleted?

When a user deletes their account, their data is securely and permanently deleted from the VoiceQ Cloud servers. VoiceQ Cloud does not retain user data after an account is deleted, except for data that may be required to comply with relevant regulations.

Does the use of VoiceQ Applications cause a breach to TPN Assessment?

No, as per MPA guidelines, use of VoiceQ applications do not breach TPN assessment. Cloud-hosted systems and servers are strictly prohibited without the advanced written consent of content owners. Therefore the use of VoiceQ Cloud services may require the approval of the content owner before storing data in the cloud, etc.