Privacy and security
Businesses across healthcare, government, and banking trust Invoca in large part because of our commitment to data security, privacy, and compliance.
- HIPAA, SOC 2 Type 2 and GDPR compliant.
- PCI DSS Certified, Privacy Shield, and TRUSTe certified.
- Supports two-factor authentication and SAML.
- Controls for call recording, data redaction, and data access.

HIPAA Compliant
The Health Insurance Portability and Accountability Act (HIPAA) sets the standard for sensitive patient data protection.

GDPR Compliant
The GDPR gives every EU citizen the right to know and decide how their personal data is being used, stored, protected, transferred and deleted

PCI DSS Certified
The Payment Card Industry Data Security Standard is a set of security standards designed to ensure that ALL companies that accept, process, store or transmit credit card information maintain a secure environment.

SOC 2 Type 2 Compliant
Developed by the American Institute of CPAs, SOC 2 defines criteria for managing customer data based on five “trust service principles”—security, availability, processing integrity, confidentiality and privacy.