Security & Compliance
Built with security
at its core
Parlai is designed from the ground up to support the security, privacy and compliance requirements of government procurement, giving your procurement team the evidence they need to move forward with confidence.
Your data. Your jurisdiction. Your control.
Hosted in-region in an AWS data centre, under the local data protection law of each customer's jurisdiction. Communication activity is logged for audit, with analysis focused where risk is highest. Security by design, from the foundations up.
Data encrypted in transit and at rest
Applied across voice, video, and messaging services, supporting administrator functions and business-system to system integration points
Security Requirements Management
Our security and compliance documentation is available to support your internal review, risk assessment and procurement processes. We work directly with your Information and Communications Technology (ICT) and security teams to address facility-specific requirements.
Aligned to Local Data Protection Law
Vulnerability scanning
Encrypted Comms
Audit Logging
Security-First Design
- Designed with information security management best practices
- Regular security reviews and vulnerability assessments
- Documented security policies and controls
- Continuous improvement of security posture
Encryption and Data Protection
- Encryption applied across voice, video and messaging channels
- Data at rest encrypted using industry-standard algorithms
- Secure transport protocols for all data in transit
- Encrypted storage of all communication recordings
Data Residency
- Cloud infrastructure hosted in secure AWS data centres
- Designed to support localised data residency requirements
- Built to adhere to localised regulatory requirements
- Data residency arrangements confirmed per deployment
Access Control and Identity
- Role-based access control (RBAC) for all staff
- Granular permission management per facility, group or individual
- Multi-factor authentication support
- Centralised identity and access management
Audit Trails and Logging
- Comprehensive audit logs for all system activity
- Logging of administrative actions
- Full communication records retained per policy
- Searchable logs accessible to authorised personnel
Resilient Infrastructure
- Hosted on enterprise-grade cloud infrastructure
- High availability architecture with redundancy
- DDoS protection and network-level security
- Disaster recovery and business continuity planning
Standards and Frameworks
Role-based access and audit controls
Correctional facility communications policy alignment
Privacy-by-design principles