Security and Trust at Rezonate, ISO 27001, SOC 2 Type II, HIPAA
Security and trust

Built for the conversations that cannot go wrong.

A decade inside regulated healthcare taught us that trust is the product. Every control below is live in kira today.

Certified

Independently audited.

ISO/IEC 27001 ISO/IEC 27017 ISO/IEC 27018 AICPA SOC 2 Type II HIPAA compliant

kira is built to HIPAA, PDPA and GDPR requirements. Reports are available under NDA on request.

Controls

What keeps every conversation inside the lines.

Isolation

Tenant-level isolation

Each customer runs in its own isolated tenant. No shared knowledge, no shared conversation history.

Data

PHI-aware handling

Protected health information is recognised and handled under the rules you set, on every channel.

Governance

Approval gates

Changes to a journey, a script or a knowledge source pass a named approver before they reach a patient or customer.

Evidence

Audit logs

Every conversation, decision and handoff is logged and exportable for compliance review.

Consent

DNC controls

Do-not-contact is enforced at the platform level, across voice and every messaging channel.

Safety net

Human escalation

A person can take over at any moment, and the full context goes with them.

Questions, answered

What security teams ask us.

Is Rezonate HIPAA compliant?

kira is built to HIPAA requirements, with PHI-aware handling, tenant-level isolation and audit logs. Rezonate is ISO 27001 and SOC 2 Type II certified.

Where is data processed?

Rezonate operates from Singapore, the United States, Brazil and Australia. Data residency and processing regions are agreed per deployment; ask us about your jurisdiction.

Can a human take over a conversation?

Yes. Human escalation is part of the platform, and the full conversation context travels with the handoff.

How is the AI kept on-message?

kira retrieves from approved knowledge only, and changes to journeys pass through approval gates before they go live. Every conversation is logged for audit.

Do you honour do-not-contact requests?

Yes. DNC controls are enforced at the platform level across every channel.

Which certifications does Rezonate hold?

ISO/IEC 27001, 27017 and 27018, and SOC 2 Type II. kira is built to HIPAA, PDPA and GDPR requirements.