Trust Center.
How EchoNova protects your data, how we treat every voice on the platform, and every policy we publish, in Arabic and English, each with a PDF.
Where we stand.
The frameworks we are working towards. We hold no certification yet, and we will update this page the day we do.
| ISO/IEC 27001 | In progressInformation security management system, built with a specialist partner. |
| ISO/IEC 42001 | In progressAI management system, including AI impact assessments. |
| UAE Personal Data Protection Law | AligningFederal Decree-Law No. 45 of 2021. |
| Saudi Personal Data Protection Law | AligningFor processing of Saudi personal data. |
| UAE Information Assurance standards | AligningControls mapped against the national standard. |
| UAE National Cloud Security Policy | AligningCloud hosting and configuration controls. |
| CSA STAR Level 1 | In progressPublic self-assessment of cloud security controls. |
How we protect it.
The controls behind our commitments, grouped by area.
Data security1
- No new training copies after you opt out
Access4
- Named accounts for everyone with production access
- Least-privilege permissions
- Multi-factor authentication on cloud consoles
- Access removed the day someone leaves
Monitoring2
- Generation records kept up to 12 months
- Append-only storage for evidence records
AI and voice safety6
- Inaudible watermark on every generated file
- Recorded consent and a voice identity check before any voice is cloned
- Blocked list of public figures' voices
- Input screened for banned content, Arabic and English
- Training opt-out in every account
- Artists' recordings never given to third parties
Privacy4
- Processing under the UAE and Saudi data protection laws
- 30 days' notice before any new subprocessor
- Data deleted within 60 days of closing, and from backups within 95
- Data subject requests through privacy@echonova.ai
Incident response3
- Security reports answered within 2 business days
- Misuse reports decided within 10 business days
- Evidence shared with affected voice owners
Every policy, in writing.
Read any document here in Arabic or English, or download it as a PDF. Accepting our terms in your account accepts the version shown here.
Self-serve plans, credits, billing and refunds, what you may do with generated audio, and your account.
Enterprise plans and Sada: services, AI terms, customer data, fees, liability and service levels.
How we process personal data for our customers: roles, security, subprocessors, transfers, breaches and deletion.
The providers that process customer data on our behalf, what they handle, and where.
The terms under which artists record for the voice library, and how they are paid.
What personal data we collect, why, how long we keep it, and your rights over it.
How to report infringing content or a misused voice, and how to use our name and logo.
Tell us.
Every report is read by a person, gets a case number, and gets an answer.
Found a vulnerability or suspect an incident? We reply within 2 business days.
security@echonova.aiYour voice used without consent, or content that breaks our policies.
abuse@echonova.aiAccess, correct or delete your personal data.
privacy@echonova.aiCopyright, trademark and legal notices.
legal@echonova.ai