Access Control - Servers and Data Stores
This topic details the access control measures in place for Administration Platform and Communication Recording Agent servers and data stores. Uniphore services are architected around a multi-layer security policy.
Layer 1 - Secret Management
Secret management is centralized and automated, reducing the risk of human error and exposure. All secrets (for example API keys, credentials, and certificates) are stored in a secure, encrypted vault (AWS secrets Manager) and only programmatic access to the keys is available from the micro-services. Humans do not get access to the database directly (including Uniphore employees). Access to these secrets is governed by strict policies, and no developers or unauthorized personnel can directly access or view these secrets. This approach mitigates the risk of credential compromise and ensures that sensitive information is always handled securely.
Layer 2 - Authorized Users
Uniphore employee access is strictly controlled and monitored to ensure data security across the platform. Strict access policies are centrally controlled by Uniphore Single Sign-On (SSO) using Azure AD with MFA (these access policies are not to be confused with Communication Recording Agent Access Policies which contribute to determining captured call access).
Access to the production cluster is highly restricted, access is authorized to only a small subset of our Cloud Operations and Site Reliability Engineering (SRE) teams ensuring only authorized personnel can manage infrastructure.
Layer 3 - Teleport
For added security Teleport is deployed for zero trust access and role-based access control (RBAC) to govern actions within the production cluster. Access to Uniphore’s cloud operations in the Production environment is tightly controlled and monitored.
All access is routed through Teleport, a modern security platform that provides secure access to hosts, services, and infrastructure components. Teleport enforces stringent authentication and authorization policies, eliminates the need for static credentials addressing credential compromise concerns, providing granular access controls and session recording capabilities. This means that all actions performed within the production environment are audited in real-time, ensuring full traceability and accountability for every operation and any anomalous activity is flagged and can be immediately addressed. As mentioned above, access is limited to only authorized personnel, minimizing the attack surface and preventing any unauthorized interactions with critical infrastructure.