Ondoku | How secure is Ondoku? Servers and security explained

When creating audio with Ondoku, you need to enter the text you want read aloud.

You may be concerned that the text you enter could be misused or wonder whether it is safe.

Audio may contain confidential company information, so it is only natural to be cautious.

In this article, we’ll take an in-depth look at Ondoku’s security measures.

Security concerns about Ondoku

Security is a concern when using any service. What security measures does Ondoku have in place?

• Are there features to prevent unauthorized access when logging in to an account?
• Is the text I enter stored on a server?
• Which servers does Ondoku use?
• Is access to my account restricted to me?
• Could third parties access stored data?
• Has Ondoku received external security certifications?
• Is communications encryption properly implemented?
• Is Ondoku a SaaS service?
• How is confidentiality handled?

We’ll answer each question in detail.

Are there features to prevent unauthorized access when logging in to an account?

Yes. If authentication fails due to an incorrect password a specified number of times in a row, the account is locked and the user cannot log in.

To prevent unauthorized access through attacks such as list-based login attempts, an account is locked and the user cannot log in if authentication fails due to an incorrect password a specified number of times in a row.

*The conditions cannot be disclosed for security reasons.

You can also enable two-factor authentication to prevent unauthorized access by third parties.

For details about two-factor authentication, see this article.

How to set up two-factor authentication on Ondoku | Illustrated steps for enabling and disabling it

A detailed guide to setting up two-factor authentication on Ondoku. In addition to your password, verification codes help prevent unauthorized access. It also explains the importance of backup codes and how to disable two-factor authentication.

Is the text I enter stored on a server?

The text you enter is stored on Ondoku’s servers.

The storage period varies depending on your membership plan.

• Non-members: Read-aloud text and audio data are stored for 30 days after creation (history cannot be viewed)
• Free members: Read-aloud text and audio data are stored for 30 days after creation
• Paid members: For the period selected in settings (choose from 1, 2, or 3 years, or indefinitely; the default is 1 year)
• Business plan members: Until the member deletes their own history

This is how long the data is stored.

Paid members can change the storage period under “History retention period” in the settings. For users who have been with us for some time, we set a period based on how long they have used the service.

Read-aloud history is automatically deleted once the retention period expires (shared read-alouds are not deleted). For details, including how long data is stored after canceling a paid plan, see here.

Ondoku uses Google Cloud for its servers.

Free and paid members can also delete data from Ondoku’s servers by deleting read-aloud history from their history. This is possible with the deletion feature.
* Deleting history does not increase the number of characters you can have read aloud.

How to use Ondoku’s deletion and bulk deletion features, and important points to note. Delete text and data from your history and the server

With the newly introduced “deletion” feature, you can now easily delete data you’ve had read aloud yourself! Here’s how to use the deletion and bulk deletion features, along with important points to note.

Which servers does Ondoku use?

Ondoku uses Google Cloud Platform (Tokyo region).

Official website: Google Cloud

The servers are located in Tokyo.

Is access to my account restricted to me?

Accounts are managed using

• email address
• password

.

We recommend using a strong password and avoiding weak passwords, passwords used on other websites, or passwords that may have been exposed.

What is a strong password?

• Use a long password (around 15 characters) made up of a combination of numbers, uppercase letters, and lowercase letters
• Add symbols for even greater security
• Use a different password for each service

Source: https://www.ipa.go.jp/security/chocotto/

Please ensure that you store this information securely.

Could third parties access stored data?

Read-aloud text and audio are stored on servers with robust security systems and can only be viewed by users who are logged in.

Has Ondoku received external security certifications?

Ondoku has not obtained certifications such as the PrivacyMark.

Does Ondoku conduct security assessments?

Yes, we do.

Ondoku has passed penetration tests conducted at a scale 10 times greater than the standards set by IPA (Information-technology Promotion Agency, Japan).

Through rigorous penetration testing by an external specialist organization, we thoroughly assess system vulnerabilities and ensure security.

Is communications encryption properly implemented?

All pages of our service are encrypted using SSL/TLS, so third parties cannot view their contents.

Is Ondoku a SaaS service?

Yes, Ondoku is a SaaS service.

What is SaaS?

SaaS is an abbreviation for “Software as a Service,” pronounced “sass.”
It refers to the delivery and use of software over the internet as a service, rather than as a packaged product.
SaaS typically has the following characteristics:

Data can be stored online
Data can be accessed from PCs, smartphones, tablets, and other devices
Multiple people can share and edit the same data
Google Workspace (formerly G Suite) and Salesforce are examples of SaaS services.
Source: https://cloud-ace.jp

Ondoku can be used from

• computers
• smartphones
• tablets

and other devices, from anywhere with an internet connection.

How is confidentiality handled?

For details about confidentiality, please see our Terms of Use.

Please refer to Article 22: Confidentiality.

Some of your data may be used by a limited number of our employees to check for errors or assess audio quality, or used as statistical data for improving audio technology and for research and development.

However, we do not make the text you enter or the audio we create publicly available, nor do we provide your data to third parties.

We can also provide information for security reviews

When using a service at work, some companies may require you to complete a security questionnaire before you can use it.

There are two ways to respond to a security questionnaire:

1. Use the security questionnaire below as a reference and complete it yourself.
2. If you need us to review or fill out the questionnaire, we can do so for a fee.

For details about reviewing a completed questionnaire and the fees for paid options, please see the following page.
Could you fill out a security questionnaire?

Could you fill out a security questionnaire? [Ondoku]

If you need a security questionnaire to use Ondoku, please see the following.

Before contacting us, please check the FAQ and the information required under the Act on Specified Commercial Transactions

We’ve compiled answers to common questions about using Ondoku in our FAQ.

The FAQ covers topics such as

• how to use the service
• audio files and downloads
• payment methods
• business use

and provides answers in a question-and-answer format. Most questions can be resolved by visiting the FAQ.

We also share detailed information about Ondoku on our blog. We regularly post updates and information about the latest Ondoku developments.

Information about the operator and other details can be found in the disclosure required under the Act on Specified Commercial Transactions.

We hope you find these resources helpful.