Account access uses two-factor authentication via Google Authenticator or Microsoft Authenticator (TOTP), required at signup.
Payment details are handled entirely by Stripe — Teleconnect does not store card numbers.
Recording playback in the customer portal is access-logged.
Infrastructure, data-retention, and compliance specifics (e.g. SOC 2, encryption at rest) aren't confirmed in this codebase — contact support for a current security overview.