How secure is my data in MyOperator’s cloud, and what controls can I add?

How secure is my data in MyOperator’s cloud, and what controls can I add?

⚡Quick answer -

MyOperator uses AWS-based “defence-in-depth”: private VPCs, encrypted storage, TLS-only traffic, RBAC, 24 × 7 monitoring, and an audited incident-response plan. You control user roles, IP allowlisting, MFA, and data export.

When should I use this guide?

Read this if you :

  • need to reassure stakeholders about data security, or
  • Want a checklist of customer-side actions—IP allowlisting, MFA, and log reviews—to meet your internal policies.

📕Table of Contents

  1. Cloud security at a glance
  2. Watch the video walkthrough
  3. Protections by layer
  4. Incident-response workflow
  5. Customer controls
  6. How-to: enable IP allowlisting
  7. Verify & monitor security
  8. Limits and shared-responsibility
  9. Related Articles

1 — Cloud security at a glance

• Hosting: AWS, isolated Virtual Private Cloud (VPC)

• Encryption:

 – At rest → AES-256 on all storage

 – In transit → TLS 1.2+ for every endpoint

• Access control: Role-based (RBAC), MFA, optional IP allowlisting

• Monitoring: IDS, malware scans, central logs, 24 × 7 SOC

• Certifications: AWS ISO 27001, GDPR-aligned processes

• Change management: Peer code review, CI security scans, monthly pen-tests

Watch the video walkthrough

2 — Protections by layer

Layer

Controls we operate

Infrastructure (AWS)

VPC isolation, Security Groups, encrypted EBS/S3, automated patching

Application

TLS-only APIs, prepared-statement DB queries, CSRF tokens, rate limits

Operations

Least-privilege IAM, MFA for admins, quarterly access reviews, secure SDLC

3 — Incident-response workflow

image.png

Alt-text: “Monitor → Detect → Contain → Notify customer if SLA impacted → Post-mortem.”

4 — Customer controls (what you can do)

  1. Enable MFA – Settings → Security → Multi-factor.
  2. Use least-privilege roles – Settings → Users: give each agent exactly what they need.
  3. Turn on IP allowlisting (see next section).
  4. Review access logs weekly – Reports → Audit.
  5. Rotate API keys every 90 days under Settings → API Keys.

5 — How-to: enable IP allowlisting in

Platform

One-liner (replace values)

Linux iptables

sudo iptables -A INPUT -s 203.0.113.10/32 -p tcp --dport 443 -j ACCEPT

AWS SG (CLI)

aws ec2 authorize-security-group-ingress --group-id sg-1234 --ip-permissions IpProtocol=tcp,FromPort=443,ToPort=443,IpRanges='[{CidrIp=203.0.113.10/32,Description="Office"}]'

MyOperator UI

Dashboard → Security → IP Allowlist → Add 203.0.113.10/32 → Save

Repeat for all office / VPN IPs.

6 — Verify & monitor security

✓ Dashboard → Security shows “MFA enforced” and green IP-allowlist badge.

✓ Attempt login from an unallowed IP → receives 403 Forbidden.

✓ Audit Log records the last 30 days of role changes and login events.

7 — Limits and shared responsibility

Item

Our role

Your role

Encryption

We manage keys & ciphers

Keep browsers updated

Access control

Provide RBAC & logs

Assign least privilege, rotate creds

Third-party apps

OAuth scopes shown

Approve only trusted apps

Compliance

Data stored in the stated region

Supply lawful recording consent, WhatsApp opt-in

No cloud is 100 % breach-proof; your configuration and user hygiene matter.

9 — Related Articles

• How do I enable IP allowlisting in MyOperator?

• What security certifications does MyOperator hold?

• How can I audit user access to my MyOperator account?

Keywords - MyOperator security, cloud encryption, AWS VPC, IP allowlist, MFA, incident response

    • Related Articles

    • How secure is my data on cloud?

      One major concern that comes with trusting a 3rd party to handle your data is security. We understand the concern and that’s exactly why as your cloud telephony service provider, we ensure that every conversation you ever have, any data that you ...

    • How to Add an In-Call Webhook in MyOperator

      ? Table of Contents What is an In-Call Webhook? Prerequisites for Adding an In-Call Webhook Step-by-Step Instructions Tips for Success Troubleshooting Frequently Asked Questions (FAQs) 1. What is an In-Call Webhook? An In-Call Webhook allows ...

    • Data storage policy

      Last verified: July 25, 2025 Applies to: Active MyOperator accounts unless superseded by contract or law. MyOperator retains different kinds of account data for 6 months to 3 years. Recent data (≤ 6 months) stays on primary storage for fast dashboard ...

    • What are cloud-based services and how can MyOperator help me use them?

      ⚡Quick answer - Cloud-based services let you consume software, storage and compute over the internet—no servers to buy or maintain. They scale on demand, charge as you go, and update automatically. MyOperator is a SaaS cloud telephony platform you ...

    • How do I integrate MyOperator call data with BytePaper using the After‑Call Webhook?

      ? Table of contents When & why to use this Prerequisites Quick setup Step‑by‑step (in MyOperator) Parameter mapping Validate the integration Troubleshooting Edge cases & limitations Security & privacy Rollback / disable FAQ Related articles ...