Security is our top priority
We know that security is important to customers. We take the responsibility to ensure that the 8x8 Communication APIs platform is absolutely secure, private and reliable, so customers can have a peace of mind.
8x8's Security Organizationlink to this section
Compliance Programslink to this section
At 8x8, we take the lead in the cloud-based communications industry for security across a company’s entire enterprise.
View SOC 2 Type II Audit Certification
Secure and compliant.
Up-to-date with regulations and verified through third-party certifications—for your peace of mind.
Industry-leading Security and Compliance
Any enterprise product or service must meet or exceed existing customer security and compliance requirements. Prior to launch, all service offerings go through rigorous software code security stress testing using static and dynamic analysis.
Hacker-Powered Securitylink to this section
8x8’s Responsible Disclosure & Bug Bounty Programs
8x8 runs responsible disclosure and incentivized bounty programs through HackerOne to allow anyone to report vulnerabilities.
With this NIST best-practice RDP, we have a well-defined process for finding and fixing vulnerabilities—before they could be exploited. We partner with the security’s greatest minds to keep our customer’s and partner’s data safe and secure.
8x8 Communication APIs: Secure by designlink to this section
Application Development
The 8x8 SDLC includes multiple stages of review; starting with an architectural review at the start of new projects, ongoing code checking by both manual peer review, further review by security staff and automated reviews utilising SAST & DAST tools.
Cryptography Measures
Data is encrypted in-transit and at-rest, utilizing strong encryption technologies, such as the Transport Layer Security (TLS) version 1.2, Short Message Peer-to-Peer (SMPP) protocol via TLS, and the 256-bit AES algorithm in Galois Counter Mode (AES-GCM).
Built-in security
8x8 provides in-product security and data protection for users to securely integrate our solution, including: Two-Factor Authentication Single-Sign-On via SAML Number Lookup API Mobile Verification API Number Masking
Comprehensive processes that meet the highest security requirements
The security, availability, and confidentiality requirements for 8x8 Communication APIs platform are managed using a combination of: Documented policies and procedures Management oversight Security-first and privacy-first cultures Technology implementations using security-by-design principles These management practices are implemented in all areas to protect systems, data, and personnel and to ensure compliance with industry best practices and standards.
8x8 is committed to your security
From 8x8’s management philosophy to physical, process, employee, product, and infrastructure security as well as business continuity, 8x8 has put security measures in place to ensure your messages are reliably and securely delivered.
To get started, the 8x8 Developer Hub gives access to step-by-step guides and API references.
Learn more
Get an in-depth look at 8x8’s security practices with our security whitepaper.
