Can other organisations on 9bx see our data?

No. Every organisation is isolated at the database level with row-level security, so one workspace can never read another’s records.

Who on our team can see what?

You decide. Every user has a role with its own permissions, and access can be limited to the branches they work in. Every change is written to the audit log.

How often is our data backed up?

It depends on your plan: weekly on Free, daily on Starter, daily with point-in-time recovery on Pro, and point-in-time recovery with encrypted offsite backups on Enterprise.

How do you protect the PBX from attacks?

PBX nodes run behind a firewall that automatically blocks SIP scanners, brute-force login attempts and call floods (fail2ban with a flood guard).

Can we keep call recordings on our own storage?

Yes. Call recordings can be stored on a storage server you own, while they stay linked to the call and the customer in 9bx.

Can we export our data?

Yes. Your data is yours — export it whenever you need it.

Security & data

Your data, where you decide.

Q: Are connections and calls encrypted?

Yes. The web app runs over HTTPS with TLS, and calling in the browser and apps uses secure WebRTC over WSS. Secrets such as SIP passwords are stored encrypted.

Run 9bx on our cloud or on your own server. Either way, every organisation is isolated, every user has the access you give them, and every change is on the record.

Get started Talk to us

Hosted, or on your own server

Isolated per organisation

Audit log of every change

Security overviewALL CHECKS OK

Data location

srv-01 · your server

Tenant isolation

Row-level security

Connections

HTTPS · TLS · WSS

Backups

Daily + point-in-time

PBX firewall · blockedpbx-01

14:31203.0.113.42SIP scanner

14:08198.51.100.7Brute force

13:52192.0.2.188Call flood

Where 9bx runs

Two ways to run 9bx. The same protection on both.

Isolation, roles, the audit log and encrypted connections work the same way — wherever your workspace lives.

OPTION A

9bx Cloud

We host, update and back up 9bx for you. Your team signs in and gets to work — nothing to install or maintain.

Where your data livesHosted by 9bx

Updates applied for you

Backups on every plan

Recordings can still go to your own storage

OPTION B

Your own server

9bx runs on infrastructure you control — in your office, your data centre or your own cloud account.

Where your data livesInside your network

Calls stay on your network

Recordings on your hardware

Customer data never leaves

How we protect it

Protection built into every layer.

From the database to the phone network, every part of 9bx is designed to keep your data private and your lines safe.

Tenant isolation

Every organisation is kept apart in the database itself, with row-level security. One workspace can never see another’s data.

ROW-LEVEL SECURITY

Roles and permissions

Give every user a role that decides what they can see and do — and limit access to the branches they work in.

ROLES · BRANCHES

Audit log

Every change is recorded with who made it and when — settings, users, routing and recording downloads.

EVERY CHANGE

Encrypted connections

The web app runs over HTTPS with TLS, and calling in the browser and apps uses secure WebRTC over WSS.

HTTPS · TLS · WSS

Encrypted secrets

Sensitive credentials, such as SIP passwords, are stored encrypted — never as plain text.

ENCRYPTED AT REST

PBX network protection

PBX nodes sit behind a firewall that automatically blocks SIP scanners, brute-force attempts and call floods.

FAIL2BAN · FLOOD GUARD

Backups

Backed up on every plan.

Every workspace is backed up. Higher plans back up more often, add point-in-time recovery and keep an encrypted copy offsite.

Your data is yours. Export it whenever you need it.

Compare plans

Backups by planFree → Enterprise

PLANINCLUDEDPOINT-IN-TIMEOFFSITE

FreeWeekly backups

StarterDaily backups

ProDaily backups with point-in-time recovery

EnterprisePoint-in-time recovery and encrypted offsite backups

Recording storageConnected

Your storage serverrec-01 · inside your network

DEFAULT

RECORDINGSTATUS

#88213Support · 06:12Stored

#88212Sales · 02:47Stored

#88211Billing · 11:05Downloaded

#88210Support · 04:30Stored

Call recordings

Keep recordings on storage you own.

Recordings are often the most sensitive part of a call. Store them on your own storage server, and they stay linked to the call and the customer in 9bx.

Recordings stored on a storage server you own

Linked to the call and the customer record

Playback and downloads controlled by roles

Every download written to the audit log

Enterprise

For operators with compliance needs.

Multi-branch operators and regulated teams get extra controls and commitments on top of everything above.

Single sign-on (SSO)

Signed SLA

BTRC-ready CDR retention

Encrypted offsite backups

Dedicated success manager

Talk to sales

Responsible disclosure

Found a security issue?

If you think you’ve found a vulnerability in 9bx, please tell us privately first — with enough detail to reproduce it — so we can investigate and fix it before it’s shared publicly.

Contact our team

Questions

Security questions.

Need more detail for a security review? Ask our team.

Wherever you choose. On 9bx Cloud we host, update and back up everything for you. Or run 9bx on your own server, so calls, recordings and customer data stay inside your network.

Questions about security or hosting?

Talk to us about running 9bx on your own server, or start a trial on 9bx Cloud.

Talk to us Start a trial