This document has been prepared by the Engineering Department of Zeder LLC with the purpose of presenting a detailed and comprehensive description of the security measures, policies, and protocols applied in protecting the services this corporation offers. The confidentiality, integrity, and availability of information handled by Zeder LLC represents an unwavering commitment for the company, which is evidenced through the implementation of advanced security strategies, in line with international cybersecurity industry models and regulations.

Zeder LLC, an organization specialized in recording and storing corporate video calls, captures and hosts virtual interactions within a security framework that preserves the privacy of both participants and data handled during such communications. Services are marketed under the brand and platform selenios.com.

Zeder LLC positions itself as a regional leader in providing AI-powered recruitment services with a particular emphasis on information security. The organization complies with rigorous security controls to ensure that each phase of the recording, storage, and access process for video calls is governed by data protection and user privacy principles. The customer-facing operational platform is selenios.com.

The technological infrastructure of Zeder LLC is designed to form a secure and resilient ecosystem. The design of its technological architecture includes multiple security layers, including next-generation firewalls, intrusion detection and prevention systems (IDS/IPS), and Network Segmentation solutions to control data traffic flow and prevent unauthorized access to internal systems.

The infrastructure of the various applications owned by Zeder LLC is primarily hosted on Amazon Web Services (AWS) following the main security standards.

Video calls are recorded from the synchronization of calendars of each selenios.com user. selenios.com users in their meetings are responsible for notifying other participants that the session is being recorded by selenios.com.

Sessions are captured using secure automated tools that ensure recording fidelity and protection against any improper manipulation.

Zeder LLC employs Amazon Web Services (AWS) S3 services for video call storage. AWS was chosen due to its demonstrated commitment to computer security, offering features such as client-side encryption, detailed access logs, and geographic data replication options to increase availability and durability.

Information generated by selenios.com is stored in MongoDB databases on MongoDB Atlas Cloud servers.

Zeder LLC / selenios.com uses the services and models of OpenAI and ElevenLabs through their API. OpenAI and Eleven Labs publicly state that they do not train their models with information that Zeder LLC / selenios.com sends to their servers. Information on OpenAI and Eleven Labs servers is encrypted using AES-256 and is SOC2 compliant.

References:

• https://openai.com/enterprise-privacy/
• https://elevenlabs.io/privacy-policy

The access policy of Zeder LLC ensures that only previously authorized and authenticated personnel can access information. Following the principle of least privilege, strict permissions are assigned that suit the role each user performs within the client organization. Additionally, access to video calls is compartmentalized by organization, meaning users can only access calls relevant to their corporate scope.

All information, both in transit and at rest, is encrypted using recognized and strong algorithms, such as Advanced Encryption Standard (AES) for encryption at rest, and TLS for encryption in transit. This level of protection ensures that data is secure against interceptions and unauthorized access during transmission and storage.

The infrastructure of Zeder LLC is continuously monitored to detect and respond to any anomalous activity. The company has an Incident Response Team (CERT) that operates in collaboration with advanced monitoring solutions to act diligently upon any indication of compromise.

Aware of the inherent risks in data management, Zeder LLC has established a solid business continuity and disaster recovery plan. This plan includes the use of automatic backups and redundancy strategies to ensure quick and effective recovery of information in case of unforeseen situations.

Training and awareness in security matters are cornerstones for Zeder LLC. The organization invests in continuing education programs for its personnel, ensuring that each member of the company is aware of industry best practices and actively participates in safeguarding information security.

Zeder LLC operates under a strict "privacy by design" policy which imposes firm barriers around the information its employees can access. Only access to information necessary to perform assigned functions is permitted, and under no circumstances is employee access to video call recordings authorized without legitimate and documented cause. Additionally, all Amazon Web Services (AWS) accounts used in data management and storage are fortified with two-factor authentication (2FA), ensuring that even in the event of a possible breach of security credentials, systems will continue to be protected by an additional security layer that requires a second form of verification before allowing access.

The security framework of Zeder LLC is subject and exposed to constant testing including internal and external audits, penetration testing, and vulnerability assessments. These examinations are vital to maintaining a consistent and evolving security posture against the changing dynamics of cyber threats.

The IT security policies and procedures of Zeder LLC are subject to regular reviews to adapt to new technologies and emerging threats. For inquiries or specific requests for additional security information, the following contact is provided: dpo@selenios.com.