// Trust & Security Report
Agora, Inc.
Real-time engagement platform for voice, video, chat, and conversational AI. Core products include Video Calling, Voice Calling, Interactive Live Streaming, Broadcast Streaming, Chat, Interactive Whiteboard, Signaling, IoT, and Conversational AI Engine (for AI agents with voice/avatar capabilities).
Certifications held
9
Maturity
Enterprise
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on agora.io“Agora's SOC 2 compliance is monitored by Deloitte LLP. A SOC 2 report shows how well Agora manages and protects your data, focusing on key areas like the security, availability, integrity, and privacy of the systems that handle your information.”
Verify on agora.io“ISO/IEC 27001:2022 provides guidance for establishing and maintaining an information security management system across organizations of any size.”
Verify on agora.io“ISO/IEC 27017:2015 offers guidance and recommendations of implementing cloud-specific information security controls that complement ISO 27001 standards.”
Verify on agora.io“ISO/IEC 27018:2019 is an international privacy certification extending information security management to protect personal data when being processed in a public cloud.”
Verify on agora.io“ISO/IEC 27701:2019 is referenced as a Privacy Information Management System (PIMS), a framework to manage personally identifiable information for both data controllers and processors.”
Verify on agora.io“Agora is aligned with GDPR and is committed to providing GDPR-compliant products and services to customers in the EU region or with customers who conduct business within the EU.”
Verify on agora.io“Agora performs the role of a Business Associate under the definitions of HIPAA and maintains an ongoing HIPAA compliance program.”
Verify on agora.io“Agora is aligned with CCPA through information security and privacy programs.”
Verify on agora.io“Agora complies with COPPA requirements for protecting children's information.”
> Show 4 unconfirmed / not-held certifications
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
Geographic routing available across six regions; customers can constrain data within specific geographic boundaries for compliance (GDPR, etc.).
Agora explicitly states: 'Agora does not use Personal Information processed through the Conversational AI Engine or Agent Studio to train its own AI models.' However, third-party AI providers (LLM providers, ASR, TTS) integrated by customers may process data per their own terms, which may include model training or logging.
// Security controls
Encryption in Transit
AES 128-bit and AES 256-bit encryption available. Encryption keys managed by customers outside Agora's network.
agora.ioData Minimization
Does not access or store personally identifiable information (PII). Collects only operational data necessary for service delivery: IP addresses for geolocation, install IDs for troubleshooting, and metering data.
agora.ioGeographic Data Routing
Six-region global network with geography-based routing allowing customers to constrain data within specific geographic boundaries.
agora.ioAuthentication & Geofencing
Multiple security options available including authentication, encryption, and network geofencing.
agora.ioThird-Party Audits
SOC 2 audits by Deloitte LLP; ISO certifications verified by Ernst & Young LLP and DNV GL.
agora.io// Products & data scope
data: Video streams, metadata, minimal operational data
Core real-time video product with GDPR, HIPAA, SOC 2 compliance.
data: Audio streams, metadata, minimal operational data
Real-time voice with end-to-end encryption option.
data: Voice/text inputs, AI agent interactions, transcripts (per customer configuration)
Agora does NOT train on customer data processed through this engine. Third-party AI providers may have their own terms.
data: Avatar parameters, video synthesis, audio sync
Realistic virtual avatars synced to speech with ultra-low latency.
data: Stream data, viewer metadata
For interactive, multi-participant live streaming.
data: Broadcast streams, viewer metadata
One-to-many streaming.
data: Chat messages, user presence data
Real-time text messaging.
data: Whiteboard drawing data, session metadata
Real-time collaborative whiteboarding.
data: Signal messages, metadata
Low-latency signaling layer for custom real-time apps.
data: IoT device data, connectivity metadata
Real-time for IoT devices.
data: Audio streams, transcription output
Live captions and transcripts; retention per customer configuration (default 30 days).
data: Audio streams for processing
Real-time background noise reduction.
data: Performance metrics, call quality data
Real-time monitoring, measurement, and diagnostics.
data: Audio, video, and web page recordings
Flexible recording options for archive, review, or distribution.
// What to watch
- Third-party AI provider terms: When customers integrate their own LLM, ASR, or TTS providers (e.g., OpenAI, Google, Twilio), those providers operate under their own terms which may include data retention, logging, or model training. This is disclosed in privacy policy but worth noting in comparisons.
- Terms of Service grants broad license: ToS grants Agora rights to 'use, host, store, transfer, publicly display' user content, but this is limited to service delivery and is standard for SaaS platforms. Privacy policy clarifies no PII is accessed independently.
- HIPAA as opt-in: HIPAA compliance is optional (with BAA) and not default for all customers—only those requiring it need to engage.
// At a glance
Pricing model
Pay-as-you-go based on usage minutes and features; free tier with 10,000 free minutes to start.
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Agora, Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
agora.io