1. Purpose
This policy establishes encryption requirements for all remote network connections to ensure data protection in transit and prevent unauthorized access to sensitive information.
2. Scope
This policy applies to all employees, contractors, and third parties who access Speak AI Inc. systems remotely. It covers all communications involving the transmission of sensitive or confidential data.
3. Encryption Requirements
3.1 General Encryption Standards
- All remote connections must use industry-standard encryption protocols such as TLS 1.2 or higher, IPsec, and SSH.
- Data in transit must be encrypted with TLS 1.2 or higher.
- Legacy encryption protocols (e.g., SSL 3.0, TLS 1.0, and TLS 1.1) are prohibited.
3.2 Secure Remote Access
- Remote access to internal systems goes through TLS-encrypted cloud services; no company VPN is operated.
- Multi-Factor Authentication (MFA) is required for all remote access to internal systems.
- Remote desktop access, where used, must be tunneled through an encrypted channel.
3.3 Email & Communication Encryption
- Email is encrypted in transit with TLS; sensitive material is shared by access-controlled link rather than as an attachment.
- Internal messaging and collaboration tools must support encryption for data in transit.
- File transfers containing sensitive data must be performed using encrypted channels (e.g., SFTP instead of FTP).
3.4 Wireless & Mobile Encryption
- Wireless networks accessing internal systems must enforce WPA3 encryption (or WPA2 if WPA3 is unavailable).
- Mobile device communications must be encrypted (TLS), and mobile devices used for work must have device encryption enabled.
3.5 Monitoring & Compliance
- Network traffic must be monitored for compliance with encryption standards.
- Any unauthorized or unencrypted remote connections will be blocked and investigated.
- Periodic audits must be conducted to ensure encryption policies are followed.
4. Compliance & Enforcement
- Violations of this policy may result in disciplinary action, including termination of access to remote systems.
- Employees are responsible for reporting any suspected breaches of encryption policies to the security team at success@speakai.co.
5. References & Supporting Documents- Speak AI Network Security Policy: /help/security/policies/network-security/
- Speak AI Access Management Policy: /help/security/policies/access-management/
- Speak AI Vulnerability Management Policy: /help/security/policies/vulnerability-management/
6. Contact Information For any questions regarding this policy, contact success@speakai.co.
This policy is subject to periodic review and updates to align with evolving security best practices and industry regulations.