THROUGHPOINT
Start free→
Security

Trusted with your team’s conversations. Careful with all of it.

Throughpoint never stores audio, never writes without a person’s approval, and asks for the least access each tool allows.

SOC 2 Type IIGDPRSSO / SAMLAnnual pen testRequest SOC 2 report→
Data flow

How your data moves.

01→
IngestMeeting audio, pull request events and board changes arrive over encrypted connections.TLS 1.3 in transit
02→
AnalyseAudio is transcribed and compared with the state of your tools. The audio is discarded straight after.Audio never stored
03→
StoreTranscripts, cards and decisions are encrypted and kept in the region you choose.AES-256 · EU or US
04
WriteA change reaches your tools only after a person approves it, and every write is logged.Approved · audit-logged
Principles

Secure by default. Configurable where it matters.

Least privilegeEach integration asks only for the scopes it needs. Write access is limited to the actions you enable.
A person in the loopThroughpoint never acts on its own. Approval rules decide who can say yes, per workspace or project.
Encrypted everywhereTLS 1.3 in transit and AES-256 at rest. Tool tokens are stored in a separate, encrypted vault.
Your regionChoose EU or US data residency when you create a workspace. Data stays in that region.
Access controlSSO with SAML, user provisioning with SCIM, and roles for members, leads and admins.
Tested independentlyAn annual third-party penetration test, continuous dependency scanning and a public disclosure policy.
Retention

What we keep, and for how long.

DataDefaultYou can set
Meeting audioNever stored—
Transcripts30 days7 to 90 days
Action cards and decisions1 year90 days to 3 years
Audit log1 yearUp to 7 years on Enterprise
Integration tokensUntil disconnectedRevoke anytime
Subprocessors

Who else touches your data.

We notify workspace admins 30 days before adding a subprocessor.

Amazon Web ServicesHosting, storage and processingEU · US
Speech-to-text providerReal-time transcription, no retentionEU · US
Language model providerDrift analysis, zero data retentionUS
StripeBilling and paymentsUS
PostmarkTransactional emailUS
Responsible disclosureFound a vulnerability?We reply within one business day and credit researchers who report responsibly.[email protected]
For your legal teamDPA and security review.Sign our data processing agreement online, or send us your questionnaire.
Read the DPAContact security