Enterprise-grade data security and privacy
Your customer data is protected at every touchpoint. Goldfish meets the strictest international security and privacy standards.
Six pillars of enterprise security
Built for CIOs, CISOs and procurement teams who treat security as a baseline, not a feature.
End-to-end encryption
Full data encryption both in-transit (TLS 1.3) and at-rest (AES-256). Keys managed via dedicated KMS.
GDPR compliance
Built in full alignment with GDPR and local privacy laws. Independent audits available under NDA.
Zero data retention
Optional Zero Data Retention mode for sensitive content — call data is purged immediately at session end.
Role-based access control
Granular permissions and full audit logs across every action in the platform.
Continuous monitoring
24/7 security monitoring, automated threat detection, and a documented incident response plan.
Our certifications
Independently verified, not self-declared.
ISO/IEC 27001:2022
Information Security Management System certified for the development, implementation and operation of our AI-powered service automation platform. Issued by ARS Assessment (UAF/IAF accredited).
Certificate no. 060826059705 · Valid from 06/08/2026
GDPR compliance
Full GDPR compliance program covering lawful processing, data subject rights, consent management, DPIAs, SCC-based transfers and an appointed DPO.
Verified compliance status, Q3 2026
Data protection
- AES-256 encryption at rest, TLS 1.3 in transit
- Configurable retention windows (24h to 0s)
- GDPR-compliant international transfers via Standard Contractual Clauses
- Privacy by design and data minimization by default
Operational security
- ISO/IEC 27001:2022 certified information security management system
- Appointed Data Protection Officer (DPO)
- GDPR Article 28 Data Processing Agreement available
- Ongoing surveillance audits by an accredited certification body
Need our full security documentation?
We share security documentation, DPA, and architecture diagrams under NDA with qualified enterprise teams.