Skip to content

Recording Encryption

Description

Encrypts voice and screen recordings at rest using customer-managed or platform-managed encryption keys. Supports key rotation, per-tenant key isolation, and audit logging of all decryption events for compliance reporting.

Canonical use case

A healthcare provider encrypts all patient call recordings with a customer-managed key stored in their own key management system, ensuring no third party can access recordings without the customer's key.

Open Items

  • [ ] Canon alignment — populate canon_axiom_refs or confirm no existing axiom applies
  • [ ] Dependency assessment — set dependencies_assessed: true once SA has reviewed the full chain
  • [ ] effort_estimate — replace 0 with rough engineering days (order of magnitude)
  • [ ] public_description — write the public-facing description before publishing