// Trust & Security Report
Agora
Real-time engagement platform for voice, video, chat, and conversational AI. Core products include Video Calling, Voice Calling, Interactive Live Streaming, Broadcast Streaming, Chat, Interactive Whiteboard, Signaling, IoT, and Conversational AI Engine (for AI agents with voice/avatar capabilities).
Certifications held
10
Maturity
Enterprise
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on agora.io“maintain, and continually improve the governance and management of AI systems. SOC 2 Report A SOC 2 report shows how well Agora manages and protects your data. It focuses on key areas like the security, a”
Verify on agora.io“environment have received international recognition with these certifications: ISO/IEC 27001 The ISO/IEC 27001 standard provides companies of any size and from all sectors of activity with guidance for establishi”
Verify on agora.io“DNV GL is an international accredited registrar who provided ISO/IEC 27001, 27017 and 27018 certification services for Agora.”
Verify on agora.io“27001 standards, to ensure continuous management of security in a comprehensive ISO/IEC 27018 ISO/IEC 27018:2019 is an international privacy certification that extends an Information Security Management System (IS”
Verify on agora.io“System (ISMS) to protect personal data when being processed in a public cloud. ISO/IEC 27701 Also referenced as PIMS (Privacy Information Management System), outlines a framework for Personally Identifiable Infor”
Verify on agora.io“Agora is aligned with GDPR and is committed to providing GDPR-compliant products and services to our customers in the EU region or with our customers who conduct business within the EU.”
Verify on agora.io“Agora performs the role of a Business Associate under the definitions of HIPAA and maintains an ongoing HIPAA compliance program.”
Verify on agora.io“Agora is aligned with CCPA through information security and privacy programs.”
Verify on agora.io“Agora complies with COPPA requirements for protecting children's information.”
Verify on agora.io“ifiable Information (PII) Controllers and PII Processors to manage data privacy ISO/IEC 42001 Also referenced as AIMS (Artificial Intelligence Management System), outlines a framework for organizations to establis”
> Show 3 unconfirmed / not-held certifications
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
Geographic routing available across six regions; customers can constrain data within specific geographic boundaries for compliance (GDPR, etc.).
Agora explicitly states: 'Agora does not use Personal Information processed through the Conversational AI Engine or Agent Studio to train its own AI models.' However, third-party AI providers (LLM providers, ASR, TTS) integrated by customers may process data per their own terms, which may include model training or logging.
// Security controls
Encryption in Transit
AES 128-bit and AES 256-bit encryption available. Encryption keys managed by customers outside Agora's network.
agora.ioData Minimization
Does not access or store personally identifiable information (PII). Collects only operational data necessary for service delivery: IP addresses for geolocation, install IDs for troubleshooting, and metering data.
agora.ioGeographic Data Routing
Six-region global network with geography-based routing allowing customers to constrain data within specific geographic boundaries.
agora.ioAuthentication & Geofencing
Multiple security options available including authentication, encryption, and network geofencing.
agora.ioThird-Party Audits
SOC 2 audits by Deloitte LLP; ISO certifications verified by Ernst & Young LLP and DNV GL.
agora.io// Products & data scope
Data it handles: Video streams, metadata, minimal operational data
Core real-time video product with GDPR, HIPAA, SOC 2 compliance.
Data it handles: Audio streams, metadata, minimal operational data
Real-time voice with end-to-end encryption option.
Data it handles: Voice/text inputs, AI agent interactions, transcripts (per customer configuration)
Agora does NOT train on customer data processed through this engine. Third-party AI providers may have their own terms.
Data it handles: Avatar parameters, video synthesis, audio sync
Realistic virtual avatars synced to speech with ultra-low latency.
Data it handles: Stream data, viewer metadata
For interactive, multi-participant live streaming.
Data it handles: Broadcast streams, viewer metadata
One-to-many streaming.
Data it handles: Chat messages, user presence data
Real-time text messaging.
Data it handles: Whiteboard drawing data, session metadata
Real-time collaborative whiteboarding.
Data it handles: Signal messages, metadata
Low-latency signaling layer for custom real-time apps.
Data it handles: IoT device data, connectivity metadata
Real-time for IoT devices.
Data it handles: Audio streams, transcription output
Live captions and transcripts; retention per customer configuration (default 30 days).
Data it handles: Audio streams for processing
Real-time background noise reduction.
Data it handles: Performance metrics, call quality data
Real-time monitoring, measurement, and diagnostics.
Data it handles: Audio, video, and web page recordings
Flexible recording options for archive, review, or distribution.
// What to watch
- Third-party AI provider terms: When customers integrate their own LLM, ASR, or TTS providers (e.g., OpenAI, Google, Twilio), those providers operate under their own terms which may include data retention, logging, or model training. This is disclosed in privacy policy but worth noting in comparisons.
- Terms of Service grants broad license: ToS grants Agora rights to 'use, host, store, transfer, publicly display' user content, but this is limited to service delivery and is standard for SaaS platforms. Privacy policy clarifies no PII is accessed independently.
- HIPAA as opt-in: HIPAA compliance is optional (with BAA) and not default for all customers; only those requiring it need to engage.
// At a glance
Pricing model
Pay-as-you-go based on usage minutes and features; free tier with 10,000 free minutes to start.
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Agora, Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
agora.io// Trust reports for comparable tools
Other tools in the same category, each with its own sourced report.