How does Global Relay ensure data security?

How does Global Relay protect communications data?

Global Relay uses a layered security approach designed to protect customer communications throughout their lifecycle, from capture and transfer through storage, access, and long-term retention.

The security model combines encryption, access controls, data integrity checks, dedicated security operations, and independently recognized security standards so regulated organizations can maintain communications records that remain private, available, and unaltered.

To learn more about how Global Relay solutions are built security-first to protect your data, operations, reputation, and peace of mind, download the PDF or read our security strategy.

How is Global Relay data encrypted?

Global Relay encrypts customer data both in transit and at rest using cryptographic protections supported by hardware security modules.

Encryption helps protect communications while they are being transferred into the Global Relay environment and while they remain stored in the archive, reducing the risk of unauthorized access to sensitive business records.

How does Global Relay protect the integrity of archived
communications?

Global Relay uses Constant Integrity Checks to continuously verify that archived communications have not been altered, removed, or compromised.

For regulated organizations, data integrity is important because communications records may later need to support supervision, investigations, audits, legal requests, or regulatory production. Ongoing integrity validation helps provide confidence that the records being retrieved remain consistent with the data originally stored.

Where is Global Relay customer data stored?

Global Relay states that customer data is stored and processed entirely within a Canadian or U.S. data center, depending on where the organization is located.

This controlled data-residency model gives customers greater clarity over where regulated communications are processed and retained and forms part of Global Relay’s broader defense-in-depth security architecture.

How is access to customer data controlled?

Global Relay uses customer-controlled identity synchronization and least-privilege access controls to restrict access to customer data.

Privileged access is formally reviewed each month to confirm that permissions remain appropriate and current. This helps limit unnecessary access while supporting the users and teams that need communications data for compliant business purposes.

How does Global Relay monitor security threats?

Global Relay operates security monitoring 24 hours a day, seven days a week, with dedicated teams in Vancouver and London maintaining continuous threat monitoring and incident-response coverage.

The wider security program also includes annual reviews of policies covering areas such as access control, change management, data classification, patching, incident management, and risk management, alongside mandatory employee information-security training.

Which security standards and certifications does Global Relay follow?

Global Relay holds internationally recognized security certifications and aligns its security program with
established industry frameworks, including:

• SOC 2 Type II
• ISO 27001
• NIST
• CIS

These certifications and frameworks support a broader security model intended to protect the
confidentiality, integrity, and availability of customer communications data.

What should regulated firms look for when assessing data
security?

When evaluating an archive or communications compliance provider, firms should look beyond a single
security control and consider how the provider protects data across the full lifecycle.

Key questions include:

• Is data encrypted both in transit and at rest?
• Can the integrity of retained records be continuously verified?
• Where is customer data stored and processed?
• How is user and privileged access controlled?
• Is security monitoring continuous?
• Which independent certifications and recognized frameworks support the security program?

For regulated organizations, these controls help support not only cybersecurity objectives but also the
availability, integrity, and defensibility of communications records over time.

Explore Global Relay’s security approach

Download the full data security guide for an overview of Global Relay’s security controls, or explore the Global Relay Security Strategy for more detail on data protection, access, infrastructure, monitoring, policies, and certifications.