Founded in 2025

Trust Center

ThunderPhone is built for healthcare. We maintain HIPAA and GDPR compliance through documented controls, automated monitoring, and continuous policy enforcement.

GDPR CompliantHIPAA CompliantUK GDPR CompliantSOC 2 Type 1 in progress
Privacy PolicyData Processing Agreement

Compliances

GDPR
GDPR
Compliant
HIPAA
HIPAA
Compliant
UK GDPR
UK GDPR
Compliant
SOC 2 Type 1
In progress

Controls

Product security
And approves the list of people with access to
That access to the production databases is
That the production databases access and
Monitored continuously
Data security
Information security and privacy training to staff
Assigns the role of Information Security
Logical access
Monitored continuously
Network security
Guidelines to manage communications
Monitored continuously
App security
That all staff members with access to any
Identifies vulnerabilities on the Company
Infrastructure cloud provider login sessions
Monitored continuously
Endpoint security
Develops, documents, and maintains an
Policies and procedures for endpoint security
That all critical endpoints are encrypted to
Monitored continuously
Corporate security
Policy to define behavioral standards and
Organizational structure to define authorities
Established procedures to communicate with
Monitored continuously

Resources

AllPoliciesDocuments

Subprocessors

Microsoft Azure
Microsoft Azure
Cloud infrastructure
LiveKit
LiveKit
Communications infrastructure
Telnyx
Telnyx
Telephony
OpenAI
OpenAI
Artificial intelligence
Google
Google
Cloud and artificial intelligence
I
Inworld
Artificial intelligence