{"id":39962,"date":"2020-04-13T00:00:00","date_gmt":"2020-04-13T00:00:00","guid":{"rendered":"https:\/\/newrcblog.wpengine.com\/ringcentral-commitment-to-privacy-and-security\/"},"modified":"2020-10-19T22:09:45","modified_gmt":"2020-10-19T22:09:45","slug":"ringcentral-commitment-to-privacy-and-security","status":"publish","type":"post","link":"\/us\/en\/blog\/ringcentral-commitment-to-privacy-and-security\/","title":{"rendered":"RingCentral\u2019s commitment to privacy and security"},"content":{"rendered":"

In recent weeks, video conferencing has been embraced by people around the globe \u2013 businesses, schools, government agencies and our families. But more recently, security, data privacy and user safeguards have come to the forefront when it comes to video conferencing services.<\/span><\/p>\n

In the spirit of transparency, we wanted to provide clarity to our customers \u2013 and potential customers \u2013 about our focus and commitment to privacy and security.<\/span><\/p>\n

Our Approach to Security<\/b><\/h4>\n

RingCentral\u2019s long-standing commitment to security is multidimensional. <\/span>As a cloud company, we look at cyber security in four dimensions – Enterprise, Cloud, Product, and Customer Trust. We approach each as an essential priority to our business. We know that a strong company, and a strong service for our customers, requires commitment and discipline in each of these areas.<\/span><\/p>\n

Enterprise Security<\/b><\/h4>\n

RingCentral applies an enterprise-grade, multi-layered security strategy. Led by our global security team, and encompassing many company-wide cross-functional efforts,<\/span> w<\/span>e have implemented a series of organizational, technical, and operational cybersecurity measures. We continuously monitor several metrics to give us visibility into various dimensions of our cybersecurity efforts, perform proactive security assessments, and engage in cybersecurity governance and enterprise risk management activities. Throughout the year, we perform multiple security assessments of various types, cyber security governance activities, and enterprise risk management activities. Our senior management maintains an active involvement.<\/span><\/p>\n

Cloud Security<\/b><\/h4>\n

Cloud Security is the security of our infrastructure, back-end communications platform, service environments, and service operations. We employ a layered defense throughout our service cloud consisting of border defenses, multi-factor access controls, cloud security infrastructure, host-level defenses, security telemetry and monitoring. Our operational security practices include more than 300 controls that we audit annually. Our Security team has dedicated security engineering, security data analytics, and detection and response personnel. Our Network Operations Center monitors service availability [24\/7] and initiates response for any service interruptions. We don\u2019t host our services in China, nor route customer traffic to locations in China.\u00a0 We strive to remain transparent with our customers about where customer data is stored and processed.<\/span><\/p>\n

Product Security<\/b><\/h4>\n

Product security is the security measures we build into our product and services.\u00a0 We perform security testing on each release of our products using internal and external expertise. Our product security testing leverages both off-the-shelf and manual methods. Our Security team has dedicated application security personnel. <\/span>W<\/span>e leverage <\/span>multiple secure software development frameworks, and generate data throughout the software development cycle that we use to measure several security-specific software development metrics <\/span>into our work, such as privacy-by-design and secure software development frameworks, and every year we undertake penetration testing and red team activities.<\/span><\/p>\n

Trust Programs<\/b><\/h4>\n

Trust security is our overall security framework and philosophy for providing transparency to our customers, embedding security principles into our product development activities,\u00a0 infrastructure and service operations, and engaging with independent third-party experts to test our security measures and recommend best practices. We believe that we have a strong vision when it comes to security, but we know that it\u2019s important to include both inside and outside perspectives. This is valuable for us, and valuable to our customers. Independent perspectives allow us to provide transparency. <\/span>We undergo <\/span>f<\/span>requent and proactive testing, assessments, and third-party security audits throughout the year <\/span>to give our customers assurance that controls are operating effectively for various environments.<\/span><\/p>\n

Some specifics include:<\/b><\/p>\n