> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ringingo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Ringingo Security, Encryption, and Compliance Controls

> Ringingo ships enterprise controls: RBAC, TLS 1.2+, AES-256 at rest, OAuth 2.0, SSO, GDPR, TRAI, and PCI-DSS compliance features.

Ringingo is built with enterprise-grade security controls across every layer of the platform, from access management and data encryption to regulatory compliance and audit logging.

## Security controls

| Control                          | Details                                                                             |
| -------------------------------- | ----------------------------------------------------------------------------------- |
| Role-Based Access Control (RBAC) | Granular permissions per role: Agent, Supervisor, Administrator, Read-Only Analyst. |
| Encryption in Transit            | TLS 1.2+ across all platform interfaces.                                            |
| Encryption at Rest               | AES-256 for recordings, transcripts, and interaction data.                          |
| Secure API Authentication        | OAuth 2.0 with signed tokens and expiry for external integrations.                  |
| Audit Logs                       | All admin actions logged with user ID, timestamp, and IP address.                   |
| Single Sign-On (SSO)             | SAML 2.0 and LDAP-based SSO with enterprise identity providers.                     |
| GDPR                             | Data minimisation, right-to-erasure, consent logging, and data residency.           |
| TRAI Compliance                  | DND list integration and outbound calling compliance controls.                      |
| PCI-DSS                          | Recording pause/resume during card data collection, plus DTMF masking.              |

<Warning>
  Ensure the DND list is updated in the Ringingo Campaign Manager before launching any outbound campaign. Non-compliance with TRAI regulations may result in regulatory penalties.
</Warning>

## Related

<CardGroup cols={3}>
  <Card title="DNC list" icon="ban" href="/campaigns/dnc">
    Load numbers into the suppression registry.
  </Card>

  <Card title="Activity Log" icon="clock-rotate-left" href="/settings/activity-log">
    Review the platform audit trail.
  </Card>

  <Card title="Recording" icon="microphone" href="/reports/recording">
    Manage call recordings and retention.
  </Card>
</CardGroup>