Infrastructure and network security
Application infrastructure
Primary infrastructureFeature-specific infrastructure
Access controlsVulnerability managementPenetration testingIntrusion detection and preventionLoggingLogical separationIncident responseVulnerability disclosureSoftware development life cycle
More articles
Help homeSecurityInfrastructure and network security

Application infrastructure

Dovetail utilizes industry-standard cloud infrastructure vendors to provide the Dovetail service. Dovetail's infrastructure is primarily managed through Amazon Web Services, and is complemented by additional secondary infrastructure vendors to provide specific features within the Dovetail web application, like natural language processing and transcription.

Primary infrastructure

Principally, the Dovetail web application leverages Amazon Web Services for infrastructure hosting.

The Dovetail web application is hosted in the Amazon Web Services us-east-1 region located in North Virginia, United States.

Amazon Web Services has been granted formal certification, attestation, and audit reports for ISO 27001, ISO 27017, ISO 27018, SOC 1, SOC 2, SOC 3, and more – the full list of compliance resources is available on the Amazon Web Services Security page.

Feature-specific infrastructure

Dovetail also makes use of secondary cloud infrastructure providers to process data for specific features of the web application. The use of these features is optional within the web application.

Data is sent to these providers temporarily and stored for a brief period of time in order to perform the functionality of the feature, and is subsequently permanently deleted after the functionality has been performed. No data is permanently stored or hosted within these infrastructure providers.

Natural language processing

Dovetail utilizes Google Cloud Platform for natural language processing. Upon use of the Dovetail web application’s sentiment analysis feature, the text content to be  analyzed is sent to Google Cloud Platform. All communication with Google Cloud Platform is encrypted in transit using HTTPS and Transport Layer Security 1.2.

Google Cloud Platform stores the text sent to the Cloud Natural Language API for a short period of time in order to perform text analysis and then returns the results to the Dovetail web application.

Google warrants that the stored text is typically deleted within a few hours. Google asserts that they do not use the content they process to train and improve their Cloud Natural Language features or machine analysis model.

The Dovetail web application utilizes Google Cloud Platform computation located in South Carolina, United States in the us-east1 region.

Google Cloud Platform has been granted formal certification, attestation, and audit reports for ISO 27001, ISO 27017, ISO 27018, SOC 1, SOC 2, SOC 3, and more – the full list of compliance resources is available on the Google Cloud Platform Security page.

Automated audio transcription

Dovetail utilizes Rev.ai for automated audio transcription. Upon use of the Dovetail web application’s automated transcription feature, the audio file to be transcribed is sent to Rev.ai. All communication with Rev.ai is encrypted in transit using HTTPS and Transport Layer Security 1.2. Audio files temporarily stored with Rev.ai are encrypted at rest.

Audio files sent to Rev.ai for transcription are deleted immediately through explicit request after the finalized transcript is received by the Dovetail web application. In addition this, an automated deletion policy has been configured to automatically delete all completed transcription jobs sent to Rev.ai every 24 hours.

All Rev.ai data is hosted and processed using Amazon Web Services facilities in the United States – this is the same environment that described above as the primary infrastructure provider.

Was this article useful?
Related articles
Legal and privacy
Data subprocessors
Security
Vendor management
Authors
Brad Ayers
Co-founder / CTO
Article info
Last updated 25 September 2020
3 min read

Get help

Can’t find what you’re looking for? Search through our articles or contact our support team and get a response within 24 hours.

Get help