Your conversations are private.
Guaranteed by architecture.
Scripra is engineered with bank-grade encryption, Zero Data Retention (ZDR), and zero AI model training from the ground up.
SOC 2 Type II
Rigorous third-party evaluation of security, availability, and processing integrity controls.
HIPAA Ready
Protections for electronic Protected Health Information (ePHI) suitable for telehealth and healthcare.
GDPR Compliant
Full European data residency support, strict privacy rights, and single-click right to be forgotten.
ISO 27001
International benchmark for information security management systems and automated risk governance.
How Meeting Audio Travels Through Scripra
From the moment our bot joins your Microsoft Teams, Google Meet, or Zoom room, audio is isolated and protected at every hop.
Encrypted Meeting Join
Scripra Bot joins Teams, Meet, or Zoom via an isolated sandboxed headless browser. Clearly identified in the attendee list.
Ephemeral Audio Streaming
Raw 16kHz PCM audio is encrypted and streamed to dedicated ASR processing nodes in volatile RAM without disk buffering.
Zero-Retention Transcription
Speech is converted to text with real-time speaker diarization. Audio slices are immediately purged once transcribed.
Isolated Intelligence Synthesis
Scripra's Neural Engine extracts executive MoM, action items, and translations inside isolated enterprise prompts with zero model training.
Secure Dispatched Delivery
Formatted intelligence is delivered directly to authorized attendee inboxes via encrypted Resend API and saved to your private dashboard.
Six Pillars of Scripra Trust
Built to exceed the strictest infosec requirements of Fortune 500 security officers and legal teams.
Zero Foundation Model Training
Your meeting audio, diarized transcripts, and executive summaries are strictly confidential. Scripra and our underlying transcription engines NEVER use your customer conversations to train, tune, or improve public AI models.
- ✓Strict zero-training policy enforced at API level
- ✓Isolated customer context windows
- ✓No cross-organization data contamination
Ephemeral RAM Zero Storage Policy
Live audio streams are processed in volatile server memory (RAM) and immediately discarded as soon as the speech tokens are transcribed. Raw audio is never persisted to unencrypted disks or public caches.
- ✓Volatile memory buffer wiped on session conclusion
- ✓No persistent raw audio recordings on disk
- ✓Minimal content-free operational telemetry
End-to-End Military-Grade Encryption
All audio streams, webhooks, and database records are safeguarded with the highest industry encryption standards both in transit and at rest.
- ✓TLS 1.3 and WSS with Perfect Forward Secrecy
- ✓AES-256-GCM encryption at rest with automated key rotation
- ✓Encrypted email delivery via Resend TLS
Enterprise Access Governance & SSO
Granular access management to ensure that only authorized team members can view, search, or export meeting intelligence.
- ✓SAML 2.0 Single Sign-On (Okta, Azure AD, Google Workspace)
- ✓Role-Based Access Control (Admin, Member, Guest)
- ✓Automated SCIM user provisioning and de-provisioning
Tamper-Evident Audit Trails
Every interaction within Scripra generates an immutable, timestamped audit log for corporate compliance and forensic tracking.
- ✓Logs who attended, viewed, exported, or deleted transcripts
- ✓API access tracking with IP geofencing
- ✓SIEM log streaming export (Splunk, Datadog)
Data Sovereignty & Single-Click Purge
You own your conversation data 100%. Export meeting records anytime in standard formats, or wipe all organizational history permanently.
- ✓Instant automated export (JSON, Markdown, TXT)
- ✓Hard deletion: zero soft-delete ghosts or retention lag
- ✓Custom retention lifecycles (purge after 30, 60, or 90 days)
Frequently Asked Security Questions
Direct answers to the questions compliance officers and security analysts ask us most.
Q:Does Scripra record video or screen sharing?
No. Scripra is strictly an audio-to-intelligence platform. Our bots do not capture, record, or store any video feeds, webcam streams, or attendee screen shares.
Q:Do you train AI models on our company's confidential conversations?
Never. We enforce a strict contractual and technical policy: zero customer data is ever used to train, tune, or improve foundation AI models (neither Scripra's internal models nor third-party models).
Q:Can attendees tell that a bot is in the meeting?
Yes. Scripra operates with 100% transparency. The bot joins as a visible participant named 'Scripra AI Bot' and appears in the active attendee roster. In addition, meeting hosts must confirm participant consent before session recording starts.
Q:How does Scripra handle HIPAA and healthcare privacy?
For healthcare providers, medical clinics, and telehealth organizations, Scripra provides Business Associate Agreements (BAAs) on Pro and Enterprise tiers, ensuring all conversational intelligence adheres to HIPAA physical and technical safeguards.
Q:Where is data processed and stored?
Scripra uses enterprise cloud infrastructure with data centers in the United States and the European Union. EU organizations can request Sovereign EU data processing to guarantee data never leaves the EU.
Q:Can we set custom data retention policies?
Yes. Enterprise administrators can set automated lifecycle rules to automatically purge transcripts, summaries, and meeting logs after 7, 30, 60, or 90 days.
Need a Custom Security Review or BAA?
Our security engineering team works directly with your enterprise security, legal, and compliance officers to complete vendor assessments, sign BAAs, and configure SSO.