https://onscript.ai/assets/trust-9rBuCE7f.js

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/pixelCard-CBQrGEmV.js","assets/animations-CJ4TdAif.js","assets/vendor-ByPF_S4G.js"])))=>i.map(i=>d[i]);
2import{_ as o}from"./index-CyZWTGvk.js";import{j as e}from"./animations-CJ4TdAif.js";import{a as c}from"./vendor-ByPF_S4G.js";import{l}from"./loadable.esm-CUaD11Ov.js";import{L as d}from"./layout-DAUQC38W.js";import{S as m}from"./seo-BihAaRYe.js";import"./charts-DkN2C-f9.js";import"./footer-D1cLKRvu.js";const p=l(()=>o(()=>import("./pixelCard-CBQrGEmV.js"),__vite__mapDeps([0,1,2])),{ssr:!1}),u=[{name:"Change Management",count:7,expanded:!1,controls:["Changes to production systems require documented approval","All code changes undergo peer review before deployment","Change management system tracks all modifications","Rollback procedures documented and tested regularly","Emergency change procedures established","Post-implementation review required for all changes","Version control system maintains complete change history"]},{name:"Availability",count:3,expanded:!1,controls:["99.9% uptime SLA with redundant infrastructure","Automated failover and disaster recovery systems","Regular backup procedures with encrypted storage"]},{name:"Organizational Management",count:12,expanded:!1,controls:["Regular security awareness training for all employees","Background checks conducted for all personnel","Clear information security policies and procedures","Incident response team with defined roles","Vendor risk management program","Annual security assessments and audits","Executive oversight of security program","Compliance monitoring and reporting","Security metrics reviewed quarterly","Third-party security assessments","Employee offboarding security procedures","Acceptable use policies enforced"]},{name:"Confidentiality",count:4,expanded:!1,controls:["Data encryption at rest and in transit (AES-256)","Multi-factor authentication required for system access","Role-based access controls enforced","Secure data destruction procedures"]},{name:"Vulnerability Management",count:2,expanded:!1,controls:["Regular vulnerability scanning and penetration testing","Patch management procedures with prioritization"]},{name:"Incident Response",count:2,expanded:!1,controls:["24/7 security monitoring and incident detection","Documented incident response procedures and notification protocols"]},{name:"Risk Assessment",count:5,expanded:!1,controls:["Annual comprehensive risk assessments","Risk treatment plans with documented mitigation strategies","Regular security testing and validation","Third-party risk evaluations","Continuous monitoring of threat landscape"]},{name:"Network Security",count:3,expanded:!1,controls:["Firewall protection with regular rule reviews","Network segmentation and isolation","Intrusion detection and prevention systems"]}

2,{name:"Access Security",count:10,expanded:!1,controls:["Principle of least privilege access enforced","Regular access reviews and recertification","Strong password policies with complexity requirements","Multi-factor authentication for all critical systems","Automated account provisioning and deprovisioning","Session timeout and lockout policies","Privileged access management","Access logging and monitoring","Secure authentication mechanisms","Identity and access management system"]},{name:"Physical Security",count:1,expanded:!1,controls:["Data centers with 24/7 surveillance, biometric access controls, and environmental monitoring"]},{name:"Communications",count:6,expanded:!1,controls:["Secure communication channels (TLS 1.3)","Email security with spam and phishing protection","Secure file transfer protocols","Data loss prevention controls","Encrypted communication for sensitive data","Mobile device management and encryption"]}],x=[{name:"SOC 2 Type II",status:"Compliant",date:"Certified",description:"SOC 2 Type II validates the operating effectiveness of our controls over time.",image:"soc"},{name:"HIPAA",status:"Compliant",date:"Certified",description:"HIPAA compliance ensures we meet healthcare privacy and security requirements.",image:"hipaa"},{name:"ISO 27001",status:"Compliant",date:"Certified",description:"ISO 27001 certification demonstrates our information security management system.",image:"iso"}],g=({control:a,index:s})=>{const[t,n]=c.useState(!1);return e.jsxs("div",{className:"border border-gray-700 rounded-lg overflow-hidden bg-gray-900",children:[e.jsxs("button",{onClick:()=>n(!t),className:"w-full px-6 py-4 flex justify-between items-center hover:bg-gray-50 hover:bg-gray-800 transition-colors",children:[e.jsxs("div",{className:"flex items-center gap-4",children:[e.jsx("span",{className:"text-lg font-semibold text-white",children:a.name}),e.jsxs("span",{className:"text-sm text-gray-400",children:[a.count," ",a.count===1?"control":"controls"]})]}),e.jsx("svg",{className:`w-5 h-5 text-gray-500 transition-transform ${t?"rotate-180":""}`,fill:"none",stroke:"currentColor",viewBox:"0 0 24 24",children:e.jsx("path",{strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:2,d:"M19 9l-7 7-7-7"})})]}),t&&e.jsx("div",{className:"px-6 py-4 border-t border-gray-700 bg-gray-950",children:e.jsx("ul",{className:"space-y-3",children:a.controls.map((i,r)=>e.jsxs("li",{className:"flex gap-3 text-gray-300",children:[e.jsx("span",{className:"text-blue-500 mt-1",children:"•"}),e.jsx("span",{children:i})]},r))})})]})},N=()=>{const a=t=>{typeof window<"u"&&(window.location.href=`/contact-us?request=${encodeURIComponent(t)}&type=security-docs`)},s={"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://onscript.ai/#organization",name:"OnScript",url:"https://onscript.ai/",logo:{"@type":"ImageObject",url:"https://onscript.ai/og.png"},description:"AI-Powered Quality Control for contact centers with enterprise-grade security and compliance certifications.",sameAs:["https://www.linkedin.com/company/onscript-ai/"],hasCredential:[{"@type":"EducationalOccupationalCredential",credentialCategory:"Security Certification",name:"SOC 2 Type II Certified",description:"SOC 2 Type II validates the operating effectiveness of our controls over time."},{"@type":"EducationalOccupationalCredential",credentialCategory:"Healthcare Compliance",name:"HIPAA Compliant",description:"HIPAA compliance ensures we meet healthcare privacy and security requirements."},{"@type":"EducationalOccupationalCredential",credentialCategory:"Security Standard",name:"ISO 27001 Certified",description:"ISO 27001 certification demonstrates our information security management system."}]},{"@type":"FAQPage",mainEntity:[{"@type":"Question",name:"Is OnScript SOC 2 Type II certified?",acceptedAnswer:{"@type":"Answer",text:"Yes, OnScript is SOC 2 Type II certified. This certification validates the operating effectiveness of our security controls over time, ensuring the highest standards for data protection and privacy."}},{"@type":"Question",name:"Is OnScript HIPAA compliant?",acceptedA

2nswer:{"@type":"Answer",text:"Yes, OnScript is HIPAA compliant. We meet all healthcare privacy and security requirements, ensuring protected health information (PHI) is handled securely and in compliance with federal regulations."}},{"@type":"Question",name:"What security standards does OnScript follow?",acceptedAnswer:{"@type":"Answer",text:"OnScript follows multiple security standards including SOC 2 Type II, HIPAA, ISO 27001, and is GDPR-ready, TCPA-ready, and CCPA compliant. We implement comprehensive security controls across change management, availability, confidentiality, vulnerability management, incident response, risk assessment, network security, access security, physical security, and communications."}},{"@type":"Question",name:"How does OnScript protect sensitive data?",acceptedAnswer:{"@type":"Answer",text:"OnScript implements multi-layered data protection including AES-256 encryption at rest and in transit, multi-factor authentication, role-based access controls, PCI-DSS certified PII redaction, automated security monitoring, regular vulnerability scanning, and secure data destruction procedures."}},{"@type":"Question",name:"Can I request OnScript's security documentation?",acceptedAnswer:{"@type":"Answer",text:"Yes, you can request access to OnScript's security audit documentation including SOC 2 Type II reports, HIPAA compliance documentation, and ISO 27001 certificates through our Trust Center page by clicking the 'Request Documentation' button for each certification."}}]}]};return e.jsxs(e.Fragment,{children:[e.jsx(m,{title:"Trust Center - OnScript Security & Compliance",description:"Learn about OnScript's security certifications, compliance standards, and data protection measures. SOC 2, HIPAA, ISO 27001, GDPR, and more.",structuredData:s,canonical:"https://onscript.ai/trust/"}),e.jsxs(d,{activeMenuItem:"Trust",className:"relative home",children:[e.jsxs("div",{className:"container mx-auto w-full relative overflow-hidden",children:[e.jsx(p,{}),e.jsxs("div",{className:"shadow-2xl mx-auto text-center z-3 relative pb-[200px] pt-[250px] flex flex-col items-center justify-center gap-4 px-4",children:[e.jsx("h1",{className:"text-4xl md:text-8xl text-white gradient pb-2",children:"OnScript Trust Center"}),e.jsx("p",{className:"text-xl text-gray-300 max-w-4xl",children:"Our mission is to provide AI-powered call analysis solutions that help contact centers improve performance and customer satisfaction. This page is designed to provide you with transparency and information about how we handle your data, the measures we take to safeguard it, and our compliance with relevant regulations and industry standards."})]})]}),e.jsxs("div",{className:"w-full relative overflow-hidden bg-gray-950",children:[e.jsx("div",{className:"border-b border-gray-800",children:e.jsx("div",{className:"container mx-auto px-4 py-20 md:py-32",children:e.jsxs("div",{className:"max-w-4xl mx-auto text-center",children:[e.jsx("h2",{className:"text-3xl md:text-5xl font-bold text-white mb-4",children:"Compliance"}),e.jsx("p",{className:"text-gray-400 mb-12",children:"Click below to request access to our security audits for the below frameworks:"}),e.jsx("div",{className:"grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-6",children:x.map((t,n)=>e.jsxs("div",{className:"border border-gray-700 rounded-lg p-6 bg-gray-900 flex flex-col items-center text-center hover:shadow-lg transition-shadow",children:[e.jsxs("div",{className:"mb-4",children:[t.image==="soc"&&e.jsx("img",{className:"max-w-[100px] w-full",alt:t.name,src:"/images/security/soc.png"}),t.image==="hipaa"&&e.jsx("img",{className:"max-w-[100px] w-full",alt:t.name,src:"/images/security/hipaa.png"}),t.image==="iso"&&e.jsx("img",{className:"max-w-[100px] w-full",alt:t.name,src:"/images/security/iso.png"})]}),e.jsx("h3",{className:"text-xl font-semibold text-white mb-4",children:t.name}),e.jsx("p",{className:"text-sm text-gray-400 mb-4 flex-grow",children:t.description}),e.jsx("button",{onClick:()=>a(t.name),className:"w-full px-4 py-2 bg-blue-600 hover:bg-blue-700 text-white rounded-lg transition-colors font-medium",children:"Request Documentation"})]},n))})]})})}),e.jsx("div",{className:"border-b border-gray-800 bg-gray-900",children:e.jsxs("div",{className:"container mx-auto px-4 py-16",children:[e.jsx("h3",{className:"text-2xl md:text-3xl font-bold text-white mb-8 text-center",children:"Additional Compliance Standards"}),e.jsxs("div",{className:"flex flex-wrap justify-center items-center gap-8 md:gap-12 mb-12",children:[e.jsxs("div",{className:"flex flex-col items-center gap-2",children:[e.jsx("img",{className:"max-w-[80px] w-full",alt:"GDPR Ready",src:"/images/security/gdpr.png"}),e.jsx("span",{className:"text-sm text-gray-300",children:"GDPR-ready"})]}),e.jsxs("div",{className:"flex flex-col items-center gap-2",children:[e.jsx("img",{className:"max-w-[80px] w-full",alt:"TCPA Ready",src:"/images/security/tcpa.png"}),e.jsx("span",{className:"text-sm text-gray-300",children:"TCPA-ready"})]}),e.jsxs("div",{className:"flex flex-col items-center gap-2",children:[e.jsx("img",{className:"max-w-[80px] w-full",alt:"CCPA Compliant",src:"/images/security/ccpa.png"}),e.jsx("span",{className:"text-sm text-gray-300",children:"CCPA Compliant"})]}),e.jsxs("div",{className:"flex flex-col items-center gap-2",children:[e.jsx("img",{className:"max-w-[80px] w-full",alt:"PII Protection",src:"/images/security/pii.png"}),e.jsx("span",{className:"text-sm text-gray-300",children:"PII Protection"})]})]}),e.jsx("div",{className:"flex justify-center",children:e.jsx("button",{onClick:()=>window.location.href="/contact-us?type=compliance-inquiry",className:"relative rounded-full border-[1px] border-indigo-800 outline outline-[4px] outline-[rgba(41,74,124,0.5)] curs

2or-pointer px-8 py-3 text-lg font-medium bg-gradient-to-t from-blue-200 to-blue-100 to-50% transition-all hover:scale-105 text-gray-900",children:"Request Compliance Information"})})]})}),e.jsx("div",{className:"container mx-auto px-4 py-20 md:py-32",children:e.jsxs("div",{className:"max-w-5xl mx-auto",children:[e.jsx("h2",{className:"text-3xl md:text-5xl font-bold text-white mb-4 text-center",children:"Security Monitoring & Controls"}),e.jsx("p",{className:"text-gray-400 text-center mb-12 max-w-2xl mx-auto",children:"Our comprehensive security controls are continuously monitored to ensure the highest level of protection for your data"}),e.jsx("div",{className:"space-y-4",children:u.map((t,n)=>e.jsx(g,{control:t,index:n},n))})]})})]}),e.jsxs("div",{className:"flex flex-col gap-4 text-center items-center mb-40",children:[e.jsx("h2",{className:"text-2xl md:text-6xl gradient mb-4 z-10",children:"Got questions? Let's connect."}),e.jsx("button",{type:"button",className:"relative rounded-full border-[1px] border-indigo-800 outline outline-[4px] outline-[rgba(41,74,124,0.5)] cursor-pointer px-8 py-3 text-l font-medium bg-gradient-to-t from-blue-200 to-blue-100 to-50% z-10 transition-all hover:scale-105 flex flew-row gap-2 items-center text-gray-900",onClick:()=>window.location.href="/sign-up",children:"Sign Up"})]})]})]})};export{N as default};