Does Zeplyn store or retain meeting audio?

Zeplyn discards your meeting audio as soon as meeting notes are processed. Wealth managers take full control over which information is captured and sent to their CRMs and clients.

How does Zeplyn protect sensitive personal information, such as Social Security numbers?

Zeplyn ensures the privacy of sensitive information by redacting data such as Social Security numbers.

Does Zeplyn use my firm's data to train or improve its AI models?

No. Zeplyn never uses customer data to train its AI models.

How does Zeplyn encrypt data while it's stored and transmitted?

All data, including meeting notes and client information, is encrypted at rest and in transit, ensuring sensitive data remains secure throughout its lifecycle.

How does Zeplyn ensure that only authorized users can access sensitive client information?

Features such as multi-factor authentication (MFA) and single sign-on (SSO) provide robust access management, ensuring that only authorized personnel can access sensitive data.

Is Zeplyn SOC 2 Type II certified?

Yes. Zeplyn adheres to the highest standards of data security and operational integrity, verified through independent SOC 2 Type II audits.

What encryption protocols does Zeplyn use to prevent interception or unauthorized access?

Transport Layer Security (TLS) 1.3 is used to secure all communications, protecting client information from interception or unauthorized access.

Security & Compliance

Secure, compliant, and built for the trust your clients place in you

Zeplyn protects every conversation, insight, and action with enterprise-grade security and transparent safeguards, giving you the confidence to deliver trusted advice and protect your clients' financial lives

Explore the Trust Portal

Recording-free architecture

Zeplyn does not store meeting audio. Audio is processed in real time to generate structured notes, then immediately discarded, leaving no audio artifacts behind. For confidential discussions, off-the-record mode ensures sensitive conversations remain private. You decide what ultimately becomes part of the record.

Real-time processing only
No audio artifacts retained
Off-the-record mode available

Independently verified

Zeplyn is SOC 2 Type II certified and undergoes regular third-party audits across infrastructure, software, and operational processes. Our privacy practices, incident response planning, and cyber insurance coverage are designed to support firm-level risk mitigation in real-world environments.

SOC 2 Type II certified
Regular third-party audits
Comprehensive incident response planning

Built for regulated environments.
Designed to protect clients.

Security is our foundation. We know your firm operates under strict regulatory and compliance obligations, and everything we do is built to support that reality. With rigorous privacy protections, secure AI practices, and ongoing independent oversight, Zeplyn ensures your client intelligence stays safe and remains fully aligned to your firm’s standards.

Your data. Your policies.

Your firm decides what information is captured, synced, retained, and shared. Zeplyn is designed to align with your governance standards.

Built-in consent mechanisms designed to align with ADA accessibility requirements
Custom data retention policies
Automatic redaction of sensitive identifiers, including Social Security numbers
Firm-specific access control lists (ACLs) to manage note visibility

Zero data retention. No training on your data.

Zeplyn has secured zero data retention agreements with our AI providers, ensuring that any client data processed is immediately deleted by the AI vendor and not retained under standard 30-day storage policies.

Your data is never used to train large language models.
Your firm owns its data, its intelligence, and any proprietary agents configured within your environment.
Client data remains your firm’s asset and is never sold, shared, or used beyond your defined scope.

Enterprise-grade infrastructure

Security is embedded across every layer of the platform:

End-to-end encryption at rest and in transit
TLS 1.3+ securing all communications
Dedicated single-tenant environments available for enterprise firms
Archiving and WORM-compliant storage options

Controlled and compliant access

Zeplyn’s identity and access management is designed to ensure that every user and every AI agent operates strictly within defined permissions.

Single sign-on (SSO) and multi-factor authentication (MFA)
Role-based access controls and granular permissions
Agents operate strictly within the scope of the user's system credentials
Comprehensive audit logs for compliance review