Security / trust page — Whereby

Cited by

Facts read from this source

• ISO 27001 Report an error

  “The ISO27001 certification for Whereby was secured in February 2022 and the re-certification was obtained in 2025”

• Infrastructure providers Report an error

  “Whereby is hosted on world-class globally-distributed IT infrastructure, operated by globally renowned infrastructure providers.”

• Encryption transit Report an error

  “Whereby uses only TLS 1.2 with a limited set of ciphers to protect data in transit.”

• Encryption at rest Report an error

  “For data encrypted at rest, Whereby relies on AES256 based encryption.”

• Disk encryption Report an error

  “Servers have disk encryption enabled and backup data is stored in an encrypted offsite manner.”

• E2ee small rooms Report an error

  “For small rooms, End2End Encryption is in effect, ensuring that nobody except the call participants, can access the video calls.”

• Large rooms encryption Report an error

  “For large rooms, encrypted media in transit is decrypted only in the server memory, ensuring that the exposure of the decrypted stream is as minimal as possible.”

• No media storage Report an error

  “Whereby does not store your video and audio data. Period. Whether this applies to Meetings or Embedded products.”

• Meetings local recording only Report an error

  “For the Meetings product, only Local Recording is available. Data from Local Recording is only saved locally, in the user's browser until download.”

• Chat retention Report an error

  “Chat data is only stored in the local browser for the duration of the meeting.”

• Embedded cloud recording s3 Report an error

  “If using Cloud Recording, you can choose to either store it in your own S3 bucket or use Whereby-provided storage.”

• Embedded s3 no vendor storage Report an error

  “We do not store any recording when you opt-in for your own S3 bucket storage. We do store a recording on your behalf when you opt-in to use and pay for Whereby-provided storage.”

• Vulnerability disclosure Report an error

  “Make sure to check our Vulnerability Disclosure Policy to understand how to best engage us for such reports. We also maintain a security.txt entry”

• Penetration testing Report an error

  “Whereby performs regular penetration tests by contracting a specialized 3rd party. The penetration tests are conducted based on the OWASP methodology. The executive summary of the penetration test report is available for current or potential customers upon request and after signing an NDA.”

• Status page Report an error

  “Any kind of issues that affect Whereby's operational stance will be published in the Whereby Status Page.”

• Aws dublin Report an error

  “Whereby relies mostly on AWS for its core infrastructure, using the Dublin, Ireland availability zone, ensuring data remains within the EU and in the world-renowned data centers.”

• Breach notification Report an error

  “we commit to report breaches to the affected parties as soon as there is a reasonable belief that a breach has occurred. As a legislative and ethical requirement, we commit to report personal data breaches to the personal data supervisory authority within Norway.”

• EU provider Report an error

  “As a European provider, we offer robust compliance and full data control, ensuring your video solution meets the highest standards for security and privacy.”