UK/EU data region
Recordings, transcripts, chat, and files are stored in the UK/EU data region by default. Data does not leave the region unless you export it.
Security & compliance
Built to be examined.
sessions.im holds conversations that firms may one day have to defend. This page states what we do, plainly. We make no claims we cannot evidence, and we show no badges we have not earned.
Encryption
TLS 1.2+ in transit, AES-256 at rest. Media between call participants is encrypted in transit end to end of the media path.
Admin MFA
Multi-factor authentication is required for workspace admins and for step-up actions: viewing API keys, changing retention, releasing legal holds.
Waiting rooms & host approval
Guests wait until a host admits them. Screen sharing by guests requires explicit host approval, each time.
Consent logs
Recording never starts silently. Every participant acknowledges recording before it begins; the acknowledgement is timestamped and kept in the session's audit pack.
Visible recording indicators
While recording is active, every participant sees the indicator — on every surface, always with a text label. Pauses are recorded as events and marked in the transcript.
RecordingRetention policies
Retention is set per workspace. The "UK Accounting Firm Default" preset keeps session records for 7 years, then deletes on schedule. Deletions are logged.
Legal hold
A session on legal hold cannot be deleted by anyone, including admins and retention schedules, until the hold is released. Holds and releases are logged with actor and reason.
Audit packs
Every completed session can export a sealed audit pack: consent log, participant timeline, recording and pause events, screen-share timeline, file manifest, and access log.
Access logs
Every view, playback, download, and share of a session record is logged — who, what, when, from where. Shares to clients carry an expiry and are logged the same way.