Skip to main content
Waterr Meet encrypts all data both in transit and at rest to protect your conversations, recordings, and participant information.

​
In transit

All data moving between participants, Waterr servers, and AI providers is encrypted:
  • HTTPS/TLS 1.3 for all API and web traffic
  • DTLS + SRTP for real-time audio and video streams (WebRTC)
  • WSS (WebSocket Secure) for real-time messaging
No unencrypted data ever leaves the participant’s device.

​
At rest

Stored data is encrypted using industry-standard methods:

​
Infrastructure

  • Cloud provider: Google Cloud Platform, us-east1
  • Database: PostgreSQL on an encrypted persistent disk, with AES-256-GCM encryption applied by the application to sensitive fields
  • File storage: Google Cloud Storage with server-side encryption
  • Secrets: Managed through environment-level encryption, never stored in code

​
Access controls

  • All API endpoints require authentication (JWT tokens)
  • Session data is scoped to the organization that created the scenario
  • Participants can only access their own session data
  • Admin roles control who can view recordings and transcripts within an organization

​
Deletion

  • Deleting a meeting, scenario, or uploaded file removes its stored data, including the underlying objects in cloud storage
  • Participants can request deletion of their session data by contacting [email protected]
For enterprise customers with specific compliance requirements (HIPAA, SOC 2 Type II), contact us at [email protected] to discuss dedicated infrastructure options.