Security & privacy

Your information, protected.

Oula works with the most sensitive asset a company has: its conversations. That's why security isn't a section — it's the foundation. Here's what we do by default, without you having to ask.

Two-layer encryptionGoogle CASA certificationGDPR and Habeas Data
How we protect it

Every piece of your data is encrypted twice.

Your information is never left exposed. We protect it at two different moments: while it travels and while it is stored. Even if someone managed to intercept it, they would see nothing but unreadable text. Simply put: only Oula can understand what's yours when you authorize it.

When it travels

Everything moves through encrypted channels. No one along the way can read it.

Layer 1

When it is stored

It is encrypted again in our database. Even stored, it stays unreadable.

Layer 2

Only you decide who sees what

Every commitment respects your team's permissions. No one sees what is not theirs to see.

Always
What we do by default

Security you don't have to configure.

They are on from day one. You focus on getting things done; we focus on protecting what's yours.

Encryption in transit and at rest

All your information travels and is stored encrypted with industry standards. Nobody along the way can read it.

Minimal permissions

Oula only accesses what is strictly necessary to do its job. Not one permission more.

Full visibility control

You decide who sees what. Each commitment respects your organization's permissions — nobody sees what they shouldn't.

Certified and under audit

We hold Google's CASA certification and are progressing toward SOC 2 and ISO 27001, already building with their controls.

GDPR and Habeas Data

We comply with European and Colombian data protection regulations. Your rights over your information are guaranteed.

Traceability and audit

Every Oula action is logged. You can audit what was captured, what was sent, and when each commitment was closed.

Certifications

Verified by third parties, not just by us.

We meet the standards required by the platforms you connect to. We started with CASA, and we're continuing to add more.

Google CASA certification badge

CASA Tier 2

Cloud Application Security Assessment

An independent security assessment required by Google for access to Gmail and Workspace data.

Active

SOC 2 Type II

Security and availability controls

An audit of operational controls for the platform's security, availability, and confidentiality.

In progress

ISO 27001

Information security management

The international standard for an information security management system.

On the roadmap
B2B Trust

Your team trusts you. You can trust Oula.

Do you have specific security requirements or a vendor process? Write to us and we'll share our documentation.

Execute with confidence.

Security · Oula — Your information, protected