Vitel Global Trust & Security Overview

Effective Date: September 16, 2026

Trust is a shared responsibility. Vitel Global’s security program is intended to protect the confidentiality, integrity, and availability of its communications, collaboration, and AI-enabled services while giving customers information needed for responsible deployment. This overview is informational and does not create additional contractual warranties beyond an applicable customer agreement, Data Processing Addendum, or Service Level Agreement.

1. Security Governance

Vitel Global maintains administrative, technical, and organizational security measures appropriate to the nature of its Services and the risks presented by processing. Security responsibilities should be assigned across engineering, infrastructure, operations, support, and management, with policies and procedures reviewed as products and threats evolve.

2. Identity and Access Management

• Role-based or otherwise appropriate access controls for systems and customer administration.
• Authentication controls designed to protect administrative and user access.
• Least-privilege principles for workforce access to production systems and customer information.
• Processes for granting, reviewing, and revoking access as responsibilities change.
• Logging and monitoring of relevant administrative or security events, consistent with applicable law and operational requirements.

3. Data Protection

Vitel Global applies safeguards designed to protect data in transit and at rest as appropriate to the relevant system and Service. Specific technical controls, hosting arrangements, and security architecture may vary by Service. Additional security information may be made available to customers through applicable documentation, questionnaires, contractual materials, or other authorized channels. Enterprise data-protection obligations are further addressed in the Vitel Global Data Processing Addendum and product privacy supplements.

4. Application and Infrastructure Security

• Security considerations integrated into development, deployment, and change-management processes.
• Vulnerability identification, remediation, patching, and dependency-management processes appropriate to the affected systems.
• Network, endpoint, cloud, and application controls appropriate to the architecture and threat model.
• Separation of production access from ordinary business access where appropriate.
• Logging, monitoring, and alerting to identify anomalous or potentially malicious activity.

5. Incident Response

Vitel Global maintains processes intended to identify, investigate, contain, remediate, and learn from security incidents. Where an incident affects Customer Personal Data and a contractual or legal notification obligation applies, Vitel Global will provide notification in accordance with the applicable Data Processing Addendum, contract, and law. Security-incident notices are handled through designated customer and legal contacts rather than public marketing channels.

6. Business Continuity and Resilience

Vitel Global designs operational processes to support service resilience, recovery, and continuity appropriate to the Services. Specific recovery objectives, redundancy arrangements, backup practices, and uptime commitments vary by Service and are contractual only when expressly stated in an applicable Service Level Agreement or Order Form.

7. Third Parties and Subprocessors

Vitel Global may rely on cloud, communications, carrier, support, security, transcription, AI, analytics, and other providers. Relevant providers that process Customer Personal Data on behalf of Vitel Global are addressed through the Vitel Global Subprocessor Disclosure and Data Processing Addendum. Vendor diligence and contractual safeguards should be proportionate to the provider’s role and risk.

8. Privacy by Design

Vitel Global seeks to consider privacy and data-protection requirements when designing or materially changing features that process personal information. This includes defining the purpose of processing, identifying data flows and roles, considering retention and access, evaluating high-risk processing where required, and aligning disclosures with actual product behavior.

9. AI Security and Governance

AI-enabled features introduce additional risks involving prompts, model outputs, data flows, third-party providers, accuracy, and misuse. Vitel Global’s Responsible AI & Transparency Statement and AI Supplemental Terms describe the corresponding responsibilities. Vitel Global evaluates relevant provider access, data retention, model-improvement settings, prompt handling, and output controls as part of its AI and security governance processes.

10. Customer Security Responsibilities

• Protect user and administrator credentials and use available authentication safeguards.
• Limit administrative privileges and remove access when personnel no longer need it.
• Configure meeting links, guest access, recording, sharing, retention, and integrations appropriately.
• Keep endpoints, browsers, networks, and operating systems reasonably secure and updated.
• Provide required notices and obtain required consents for recording, transcription, monitoring, and AI processing.
• Promptly report suspected account compromise, abuse, or security events affecting use of Vitel Global Services.

11. Certifications and Assurance Materials

Where Vitel Global publishes certifications, independent audit information, penetration-testing summaries, security questionnaires, or compliance attestations, their availability and scope may vary by Service and may be subject to confidentiality restrictions. The absence of a particular certification from this page does not by itself describe the security posture of a Service.

12. Security Contact

Customers may report suspected security issues through Vitel Global Support at support@vitelglobal.com or through https://www.vitelglobal.com/contact. Reports should include sufficient information to help Vitel Global understand and investigate the issue, but should not include unnecessary sensitive personal information.