SECURITY
Security is a shared responsibility
RTCExpress provides project-scoped access and operational controls. You remain responsible for your application, users, data, and lawful use of the service.
Platform controls
- Customer projects use unique App IDs and server-held App Secrets.
- Clients should receive short-lived, scoped user tokens from the customer backend.
- Project diagnostics and operational views are authenticated.
- Webhooks can be verified before your application accepts an event.
Your responsibilities
- Keep App Secrets, API keys, and service credentials out of client apps.
- Authenticate users and decide room membership on your own backend.
- Obtain consent where your product records or processes communications.
- Test your own retention, access, and incident-response requirements.
RTCExpress does not claim ISO, SOC 2, HIPAA, GDPR certification, an SLA, encryption specifications, or uptime guarantees on this website. Publish only independently verified claims after the related controls, contracts, and evidence are in place.