What security do you get?
Organization security settings cover four areas.- Authentication: Unify sign-in with your corporate identity system through SAML SSO.
- Access control: Restrict access to specific IPs and govern share link visibility with policies.
- Personal data: Mask personal information recorded in notes, like phone numbers and emails, with a masking policy.
- Baseline security: Encryption at rest, storage in the Seoul region, and no AI training on your data apply to every plan. See Privacy and security.
Unify sign-in with SSO
Tiro supports SAML-based SSO. Connect an IdP such as Okta or Azure AD (Microsoft Entra ID), and your team signs in to Tiro with their corporate accounts.- You can run SSO-only. Block other methods like email and social sign-in, and account management lives entirely in your IdP.
- Closed-network environments without direct access to external authentication services are supported too.
Restrict access to your network
Limit workspace access to approved IPs only. This allows connections through your corporate network or VPN exclusively. If you need a static IP to register in your firewall, that’s supported as well. The exact configuration is worked out during onboarding.Turn on personal data masking
Turn on personal data masking as an organization policy, and personal information in newly created notes, like phone numbers, emails, and ID numbers, is masked automatically in the transcript and documents. This option fits environments like call centers, where customer personal data comes up often in conversations. Masking is decided when a note is created. Once the policy is on, it applies to notes you create afterward and doesn’t change notes already saved. If the option is enabled for your organization, an organization admin can turn it on and off directly with the [Personal info masking] toggle in the [Security] tab of the organization settings.Control share links
Manage the maximum visibility, longest expiry, and allowed company domains for share links through policy, and revoke active links from one place. For details on how this works, see Link sharing security.Frequently asked questions
Can I get security review materials?
Yes. Tiro holds ISO/IEC 27001:2022 certification and has completed both SOC 2 Type 1 and Type 2 examinations. Security review materials such as audit reports, data locations, and the subprocessor list are provided after an NDA is signed. Reach out to our sales team.Can I store data in a specific region only?
Note data is stored in the AWS Seoul region by default. If you need a dedicated VPC or a different region, that can be arranged in your contract.What does the onboarding process look like?
Leave an inquiry, and our sales team reviews your organization’s security requirements and designs a tailored setup with you. A custom onboarding session and a hotline are included too.Related pages: Privacy and security · Link sharing security · Tiro plans