Security and Information Handling Policy

1. Introduction

This document has been prepared by the Engineering Department of Samu LLC for the purpose of presenting a detailed and comprehensive description of the security measures, policies and protocols applied in protecting the services this corporation offers. The confidentiality, integrity and availability of the information handled by Samu LLC represent an unwavering commitment for the company, evidenced through the implementation of advanced security strategies, in line with international models and regulations of the cybersecurity industry. Samu LLC is an organization specialized in the recording and storage of corporate video calls, capturing and hosting virtual interactions within a security framework that preserves the privacy of both the participants and the data handled during such communications.

‍

2. Organizational Context

Samu LLC positions itself as a regional leader in the provision of video call recording services, with particular emphasis on information security. The organization complies with rigorous security controls to ensure that every phase of the process of recording, storing and accessing video calls is governed by principles of data protection and user privacy.

‍

3. Infrastructure and Security Architecture

Samu LLC's technology infrastructure is designed to form a secure and resilient ecosystem. The design of its technology architecture includes multiple layers of security, including next-generation firewalls, intrusion detection and prevention systems (IDS/IPS), and Network Segmentation solutions to control the flow of data traffic and prevent unauthorized access to internal systems. The infrastructure of the different applications owned by Samu LLC is hosted primarily on Amazon Web Services (AWS), following the leading security standards.

‍

4. Video Call Recording Procedures

Video calls are recorded based on the synchronization of the calendars of each Samu LLC user. In their meetings, Samu LLC users are responsible for notifying the other participants that the session is being recorded by Samu LLC. Sessions are captured using secure automated tools that guarantee the fidelity of the recording and protection against any improper manipulation.

‍

5. Data Storage Policies on AWS S3

Samu LLC uses Amazon Web Services (AWS) S3 for the storage of video calls. AWS was chosen because of its demonstrated commitment to information security, offering features such as client-side encryption, detailed access logs and geographic data replication options to increase availability and durability. The information generated by Samu LLC resides in MongoDB databases on MongoDB Atlas Cloud servers.

‍

6. Artificial Intelligence

Samu LLC uses OpenAI's services and models through its API. OpenAI publicly states that it does not train its models with the information that Samu LLC sends to its servers. The information on OpenAI's servers is encrypted using AES-256 and is SOC2 compliant. Reference: openai.com/enterprise-privacy

‍

7. Access and Identity Management

Samu LLC's access policy ensures that only previously authorized and authenticated personnel can access the information. Following the principle of least privilege, strict permissions are assigned that match the role each user performs within the client organization. In addition, access to video calls is compartmentalized by organization, which means that users can only access the calls relevant to their corporate scope.

‍

8. Data Encryption and Secure Transfer

All information, both in transit and at rest, is encrypted using recognized, strong algorithms, such as the Advanced Encryption Standard (AES) for encryption at rest, and TLS for encryption in transit. This level of protection ensures that data is safe from interception and unauthorized access during its transmission and hosting.

‍

9. Monitoring and Incident Management

Samu LLC's infrastructure is continuously monitored to detect and respond to any anomalous activity. The company has an Incident Response Team (CERT) that operates in conjunction with advanced monitoring solutions to act diligently at any sign of compromise.

‍

10. Resilience Strategies and Contingency Plans

Aware of the risks inherent in data management, Samu LLC has established a solid business continuity and disaster recovery plan. This plan provides for the use of automatic backups and redundancy strategies to guarantee the fast and effective recovery of information in the event of unforeseen situations.

‍

11. Workforce Education and Awareness

Security training and awareness are cornerstones for Samu LLC. The organization invests in continuing education programs for its personnel, ensuring that every member of the company is aware of industry best practices and actively participates in safeguarding information security.

‍

12. Limitation of Employee Access and Account Protection

Samu LLC is governed by a strict "privacy by design" policy that imposes firm barriers around the information its employees can access. Access is only allowed to the information necessary to perform assigned duties, and under no circumstances are employees authorized to access video call recordings without a legitimate, documented cause. In addition, all Amazon Web Services (AWS) accounts used in data management and storage are hardened with two-factor authentication (2FA), ensuring that even in the event of a possible breach of security credentials, the systems will remain protected by an additional layer of security that requires a second form of verification before granting access. This multi-factor authentication approach is applied without exception to all individuals with access to the AWS environment.

‍

13. Microphone Use in the Mobile Application

The application requests access to the microphone solely to allow user-initiated audio recording. The recorded content may be uploaded to our platform for analysis, always with the user's consent. Audio data is handled securely and encrypted, and the user may delete it at any time, whether or not it was uploaded.

‍

14. Continuous Security Audits and Reviews

Samu LLC's security framework is subject to constant testing that includes internal and external audits, penetration testing and vulnerability assessments. These examinations are vital to maintaining a consistent and evolving security posture in the face of the changing dynamics of cyber threats.

‍

15. Contact and Policy Updates

Samu LLC's information security policies and procedures are subject to regular review in order to adapt to new technologies and emerging threats. For inquiries or specific requests for additional information on security matters: security@samu.ai