Trust

Security

How we think about keys, recordings, and enterprise controls.

Controls

Transport is TLS. API keys are hashed at rest. The Payload CMS for this marketing site uses an isolated Postgres schema (payload) and does not share production billing tables.

Enterprise: SSO, RBAC, audit logs, VPC, and residency options. SOC2 is on our track — ask the team for the current report status rather than assuming a logo on this page.

India

KYC workflows and DND-aware outbound are product features you configure. We do not claim to replace your TRAI or RBI obligations.

Reporting

Suspected vulnerabilities: write to team@kupe.in. Do not attach live recordings or customer PII to a public GitHub issue.