Security

This is how we protect the data of the professionals who use Conecta Meet and of the people who join their webinars and meetings.

Infrastructure

The platform, its database and its own video server run on IONOS servers. IONOS data centres are certified to ISO/IEC 27001.
Everything travels encrypted: the website and the panel over HTTPS, and audio and video with DTLS-SRTP, the encryption WebRTC uses. Encryption protects the data in transit; it is not end-to-end encryption, because the video server must receive the streams to distribute them.
If our video server is full or not responding, a backup server on LiveKit Cloud (United States) may be used. See the sub-processors in the data processing agreement.

Passwords must have at least 8 characters with letters and numbers, and are checked against known data breaches. We store them only as a hash, never in plain text.
After 5 failed attempts in 15 minutes, logging in to the account is blocked for a while.
Two-step verification (an authenticator app on your phone, with backup codes) can be enabled by each professional in My account. We recommend it.
API keys are shown only once and stored as a hash. The keys of the video servers are stored encrypted.

Each professional only sees their own webinars, meetings, attendees and recordings; every access is checked by the application.
When a webinar or meeting is being recorded, everyone in the room sees a notice. Recordings can only be downloaded by their owner, through authenticated or temporary signed links.
Attendance data is deleted automatically after 12 months, and recordings after the time included in each plan. Each professional can delete them earlier.

If you find a security problem, contact the platform provider.

Professionals who use the platform can read and accept the data processing agreement (Art. 28 GDPR).