Security & Encryption

1. Encryption in transit

Every connection to ringexa.com and the Ringexa dashboard is encrypted with TLS 1.3 (TLS 1.2 for older devices that cannot use 1.3). Security certificates are renewed automatically, so encryption never lapses.

2. Your recordings and call data

• Recordings stay private. Call recordings are never published as public links. They play only inside the signed-in dashboard.
• Each client sees only their own data. A client account can see only the calls, contacts and recordings of its own phone line.
• The database is not on the internet. It accepts connections only from Ringexa's own application server.
• Nightly backups. Call records are backed up every night to private storage.

3. Accounts and access

• Passwords are never stored. We keep only a one-way bcrypt hash of each password.
• Sessions end when an account changes. Changing a password, role or phone line signs that account out everywhere.
• Rate limits on every request. Repeated login attempts and floods of requests are blocked automatically.
• Verified telephony. Call events from our telephony provider are checked with its cryptographic signature, so forged requests are rejected.

4. Report a security issue

If you believe you have found a security problem, write to info@ringexa.com. We reply within 12 hours, every day of the week.