Ozonetel Notification - Security Advisory: Recommended Data Protection and Access Control Enhancements

Update timeline

1. resolved Oct 14, 2026, 09:00 AM UTC

   Dear Customer, At Ozonetel, we continuously enhance our platform to help customers strengthen the security and privacy of their data. We recommend reviewing the following security features and enabling them wherever applicable within your organisation. Implementing these controls can significantly reduce the risk of unauthorised access, data leakage, and compliance-related concerns. 1. Move Audio Recordings to Private Storage Recommendation: Configure call recordings to be stored in a private bucket instead of a publicly accessible bucket. How to identify: If you can open and play a recording URL directly in a browser without logging in to Ozonetel, the recording is likely stored in public storage. Impact: Recording URLs shared with your CRM or third-party systems will require Ozonetel authentication before access is granted. Benefits: - Prevents unauthorised access to recordings. - Ensures recordings are accessible only to authenticated users. - Reduces the risk of accidental exposure of customer conversations. 2. Enable Multi-Factor Authentication (MFA) Recommendation: Enable MFA for all Admins, Sub-Admins, and Agents. How it works: Users will be required to enter a One-Time Password (OTP) in addition to their password while logging in. Benefits: - Protects against compromised passwords. - Prevents unauthorised access. - Improves security when employees leave the organisation. - Strengthens compliance with security best practices. 3. Enable Phone Number Masking Recommendation: Mask customer phone numbers for Admins, Sub-Admins, and Agents. Benefits: - Protects Personally Identifiable Information (PII). - Prevents misuse of customer contact information. - Limits visibility of customer phone numbers within the platform. - Allows customer references to be managed through UCID or CRM reference IDs. 4. Disable Audio Download and Audio URLs in CDR Reports Recommendation: Remove downloadable recording links and audio URLs from CDR exports. Benefits: - Eliminates the risk of recordings being circulated outside the organisation. - Reduces exposure of sensitive customer conversations. - Provides better control over recording access. 5. Enable Secure Recording Access Recommendation: Keep the Secure Recording Access setting enabled. Benefits: - Recordings can only be accessed after authentication. - Prevents direct playback through public links. - Ensures access is governed through user permissions. 6. Enforce Password Rotation Recommendation: Mandate password changes at least every 90 days. Benefits: - Reduces the risk associated with compromised credentials. - Encourages stronger password hygiene. - Supports security and compliance requirements. 7. Review and Restrict User Access (Recommended) Recommendation: Periodically review Admin, Sub-Admin, and Agent permissions and remove access that is no longer required. Benefits: - Adheres to the Principle of Least Privilege. - Reduces insider risk. - Prevents unauthorised administrative changes. 8. Restrict Sharing of Recording URLs (Recommended) Recommendation: Avoid sharing recording URLs through email, spreadsheets, chat platforms, or external applications unless appropriate security controls are in place. Benefits: - Prevents unauthorised distribution. - Reduces the risk of data leakage. - Maintains control over customer information. We strongly recommend enabling all applicable security controls to enhance the protection of customer data and recordings stored within the Ozonetel platform. We recommend moving your call recordings to secure private storage to reduce the risk of unauthorised access and strengthen the protection of customer data. If you prefer to continue storing recordings in publicly accessible storage, we request an explicit email confirmation from the appropriate decision-makers within your organisation acknowledging the associated security risks. In the absence of a response within 21 days of this communication, we will assume that your organisation has reviewed the recommendation and elected to continue with the current configuration. Please note that Ozonetel shall not be responsible for any security incidents, unauthorised access, or data exposure arising from recordings being maintained in publicly accessible storage despite the security recommendations provided. For any questions, clarifications, or assistance in evaluating and enabling these security features, please feel free to contact us at 1800 123 150150 or email us at [email protected]. Our team will be happy to assist you and provide guidance on implementing these security recommendations. Note: If your organisation stores audio recordings within its own cloud infrastructure, please consult your internal IT or information security teams regarding storage configuration, accessibility, authentication controls, and access management requirements. Regards, Ozonetel Support Centre.

2. resolved Oct 26, 2026, 06:39 AM UTC

   Dear Customer, At Ozonetel, we continuously enhance our platform to help customers strengthen their data security and privacy. We recommend reviewing the following security features and enabling them wherever applicable within your organisation. Implementing these controls can significantly reduce the risk of unauthorised access, data leakage, and compliance-related concerns. 1. Move Audio Recordings to Private Storage Recommendation: Configure call recordings to be stored in a private bucket instead of a publicly accessible bucket. How to identify: If you can open and play a recording URL directly in a browser without logging in to Ozonetel, the recording is likely stored in public storage. Impact: Recording URLs shared with your CRM or third-party systems will require Ozonetel authentication before access is granted. Benefits: - Prevents unauthorised access to recordings. - Ensures recordings are accessible only to authenticated users. - Reduces the risk of accidental exposure of customer conversations. 2. Enable Multi-Factor Authentication (MFA) Recommendation: Enable MFA for all Admins, Sub-Admins, and Agents. How it works: Users must enter a One-Time Password (OTP) in addition to their password when logging in. Benefits: - Protects against compromised passwords. - Prevents unauthorised access. - Improves security when employees leave the organisation. - Strengthens compliance with security best practices. 3. Enable Phone Number Masking Recommendation: Mask customer phone numbers for Admins, Sub-Admins, and Agents. Benefits: - Protects Personally Identifiable Information (PII). - Prevents misuse of customer contact information. - Limits visibility of customer phone numbers within the platform. - Allows customer references to be managed through UCID or CRM reference IDs. 4. Disable Audio Download and Audio URLs in CDR Reports Recommendation: Remove downloadable recording links and audio URLs from CDR exports. Benefits: - Eliminates the risk of recordings being circulated outside the organisation. - Reduces exposure of sensitive customer conversations. - Provides better control over recording access. 5. Enable Secure Recording Access Recommendation: Keep the Secure Recording Access setting enabled. Benefits: - Recordings can only be accessed after authentication. - Prevents direct playback through public links. - Ensures access is governed through user permissions. 6. Enforce Password Rotation Recommendation: Mandate password changes at least every 90 days. Benefits: - Reduces the risk associated with compromised credentials. - Encourages stronger password hygiene. - Supports security and compliance requirements. 7. Review and Restrict User Access (Recommended) Recommendation: Periodically review Admin, Sub-Admin, and Agent permissions and remove access that is no longer required. Benefits: - Adheres to the Principle of Least Privilege. - Reduces insider risk. - Prevents unauthorised administrative changes. 8. Restrict Sharing of Recording URLs (Recommended) Recommendation: Avoid sharing recording URLs through email, spreadsheets, chat platforms, or external applications unless appropriate security controls are in place. Benefits: - Prevents unauthorised distribution. - Reduces the risk of data leakage. - Maintains control over customer information. We strongly recommend enabling all applicable security controls to enhance the protection of customer data and recordings stored within the Ozonetel platform. We recommend moving your call recordings to secure private storage to reduce the risk of unauthorised access and strengthen the protection of customer data. If you prefer to continue storing recordings in publicly accessible storage, we request an explicit email confirmation from the appropriate decision-makers within your organisation acknowledging the associated security risks. In the absence of a response within 21 days of this communication, we will assume that your organisation has reviewed the recommendation and elected to continue with the current configuration. Please note that Ozonetel shall not be responsible for any security incidents, unauthorised access, or data exposure arising from recordings being maintained in publicly accessible storage despite the security recommendations provided. For any questions, clarifications, or assistance in evaluating and enabling these security features, please feel free to contact us at 1800 123 150150 or email us at [email protected]. Our team will be happy to assist you and provide guidance on implementing these security recommendations. Note: If your organisation stores audio recordings within its own cloud infrastructure, please consult your internal IT or information security teams regarding storage configuration, accessibility, authentication controls, and access management requirements. Regards, Ozonetel Support Centre.