Trust and Security at Right-Hand
How Right-Hand protects customer data, and where to find full security documentation.
Right-Hand is SOC 2 Type II certified, encrypts customer data at rest and in transit, and does not use customer data to train AI models. This page summarizes those commitments and links to the Trust Center for full documentation.
Is Right-Hand SOC 2 Type II certified?
Yes. Right-Hand is SOC 2 Type II certified. The independent attestation covers security, availability, and confidentiality.
How does Right-Hand protect customer data?
Encryption
Customer data is encrypted at rest with AES-256 and in transit with TLS 1.2 or higher.
Access controls and audit logs
Data protection controls include single sign-on (SSO), multi-factor authentication (MFA), role-based access control (RBAC), and audit logs.
How does Right-Hand handle voice data in vishing simulations?
Right-Hand does not store the original voice recording used to create a synthetic voice. Only the synthetic voice generated for the simulation is retained, protected with encryption at rest and in transit and with access controls.
Customers choose a voice from Right-Hand's pre-approved library or upload a custom voice. For a custom voice, the customer must confirm that it has obtained consent and authorization from the person whose voice is used.
The synthetic voice is retained under Right-Hand's data retention policies and can be deleted at the customer's request. Participation in a simulation is managed by the customer organization. Administrators control who is included, and Right-Hand does not enroll anyone independently.
Read the full voice data consent and governance details in the vishing simulation guideDoes Right-Hand use customer data to train AI models?
Right-Hand does not use customer data to train AI models. Right-Hand also configures its AI providers so that data sent to them is not used to train their models. Voice data is used only to generate the authorized synthetic voice for that customer's simulation, and it is never shared with or made available to other customers.
Where can I find the full security documentation?
For more detail on Right-Hand's security posture and compliance, visit the Trust Center.
Explore Our Trust CenterLast updated: October 7, 2026