Security, privacy, and how it all works

Your security and privacy are of utmost importance to us. Find the most important details below, followed by FAQs, and then links to all our terms and policies at the bottom of this page.

We encourage security vulnerability reports and maintain a public Vulnerability Disclosure Policy with reporting guidelines and procedures.
SOC 2

We're preparing an independent SOC 2 Type II audit of our security practices.

See our Trust page
GDPR · APPI

We're committed to GDPR and APPI compliance and have a Data Processing Agreement available upon request.

Read our Privacy Policy

Data Security

How does Pulse secure customer data?
Encryption at rest and in transit, least-privilege access, audit logs and vulnerability scanning.
Does Pulse work locally or send data to the cloud?
Audio is captured locally and sent encrypted to the cloud only for transcription and summarization. Audio is not stored.
How does Pulse manage security vulnerabilities?
Regular dependency scanning and a public vulnerability disclosure policy.
Does Pulse conduct penetration testing?
Annual third-party penetration tests are planned.
Does Pulse have any security certifications?
SOC 2 Type II is in progress; ISMS is planned.
How can I report security vulnerabilities?
Email security@ and we'll follow our disclosure policy.
Do you support SSO/SAML?
Yes, on the Enterprise plan.

Data Storage & Processing

Where is my data stored?
In in-region cloud infrastructure.
Which subprocessors do you use?
We publish a list of transcription, AI and infrastructure providers and notify before changes.
How long is data retained?
Until you delete it. Enterprise can set auto-deletion periods.
Can I export my data?
Export notes and transcripts as markdown or JSON at any time.

Ready for calmer, more productive meetings?

Join the waitlist and we'll send your beta download link in order.