Application infrastructure

Dovetail utilizes industry-standard cloud infrastructure vendors to provide the Dovetail service. Dovetail's infrastructure is primarily managed through Amazon Web Services, and is complemented by additional secondary infrastructure vendors to provide specific features within the Dovetail web application, like natural language processing and transcription.

Primary infrastructure

Principally, the Dovetail web application leverages Amazon Web Services for infrastructure hosting.

The Dovetail web application is hosted in the Amazon Web Services us-east-1 region located in North Virginia, United States.

Amazon Web Services has been granted formal certification, attestation, and audit reports for ISO 27001, ISO 27017, ISO 27018, SOC 1, SOC 2, SOC 3, and more – the full list of compliance resources is available on the Amazon Web Services Security page.

Feature-specific infrastructure

Dovetail also makes use of secondary cloud infrastructure providers to process data for specific features of the web application. The use of these features is optional within the web application.

Data is sent to these providers temporarily and stored for a brief period of time in order to perform the functionality of the feature, and is subsequently permanently deleted after the functionality has been performed. No data is permanently stored or hosted within these infrastructure providers.

Natural language processing

Dovetail utilizes Google Cloud Platform for natural language processing. Upon use of the Dovetail web application’s sentiment analysis feature, the text content to be  analyzed is sent to Google Cloud Platform. All communication with Google Cloud Platform is encrypted in transit using HTTPS and Transport Layer Security 1.2.

Google Cloud Platform stores the text sent to the Cloud Natural Language API for a short period of time in order to perform text analysis and then returns the results to the Dovetail web application.

Google warrants that the stored text is typically deleted within a few hours. Google asserts that they do not use the content they process to train and improve their Cloud Natural Language features or machine analysis model.

The Dovetail web application utilizes Google Cloud Platform computation located in South Carolina, United States in the us-east1 region.

Google Cloud Platform has been granted formal certification, attestation, and audit reports for ISO 27001, ISO 27017, ISO 27018, SOC 1, SOC 2, SOC 3, and more – the full list of compliance resources is available on the Google Cloud Platform Security page.

Automated audio transcription

Dovetail utilizes Rev.ai for automated audio transcription. Upon use of the Dovetail web application’s automated transcription feature, the audio file to be transcribed is sent to Rev.ai. All communication with Rev.ai is encrypted in transit using HTTPS and Transport Layer Security 1.2. Audio files temporarily stored with Rev.ai are encrypted at rest.

Audio files sent to Rev.ai for transcription are deleted immediately through explicit request after the finalized transcript is received by the Dovetail web application. In addition this, an automated deletion policy has been configured to automatically delete all completed transcription jobs sent to Rev.ai every 24 hours.

All Rev.ai data is hosted and processed using Amazon Web Services facilities in the United States – this is the same environment that described above as the primary infrastructure provider.