security-compliance - Ringingo Knowledgebase

Ringingo is built with enterprise-grade security controls across every layer of the platform, from access management and data encryption to regulatory compliance and audit logging.

Security controls

Control	Details
Role-Based Access Control (RBAC)	Granular permissions per role: Agent, Supervisor, Administrator, Read-Only Analyst.
Encryption in Transit	TLS 1.2+ across all platform interfaces.
Encryption at Rest	AES-256 for recordings, transcripts, and interaction data.
Secure API Authentication	OAuth 2.0 with signed tokens and expiry for external integrations.
Audit Logs	All admin actions logged with user ID, timestamp, and IP address.
Single Sign-On (SSO)	SAML 2.0 and LDAP-based SSO with enterprise identity providers.
GDPR	Data minimisation, right-to-erasure, consent logging, and data residency.
TRAI Compliance	DND list integration and outbound calling compliance controls.
PCI-DSS	Recording pause/resume during card data collection, plus DTMF masking.

Ensure the DND list is updated in the Ringingo Campaign Manager before launching any outbound campaign. Non-compliance with TRAI regulations may result in regulatory penalties.

DNC list

Load numbers into the suppression registry.

Activity Log

Review the platform audit trail.

Recording

Manage call recordings and retention.