What is Ondoku's security like? Detailed answers about servers and more

When creating audio with Ondoku, you need to input the text you want to be read aloud.

You might be worried: "Will the content I input be misused?" or "Is it safe?"

Since the audio may contain confidential company information, it is only natural to be cautious.

What is the security of Ondoku like?

In this article, we will introduce the security of Ondoku in detail.

Ondoku Security Concerns

Security is a common concern when using a service. How is Ondoku's security handled?

• Is there a function to prevent unauthorized access during account login?
• Is the input text stored on the server?
• Which servers does Ondoku use?
• Is the account set up so only I can access it?
• Is there a risk of stored data being seen by third parties?
• Have you received external certification for security measures?
• Is communication properly encrypted?
• Is Ondoku a SaaS service?
• What is the confidentiality policy?

We will answer each of these questions carefully.

Is there a function to prevent unauthorized access during account login?

Yes, we have implemented a function that locks the account and prevents login if authentication fails due to password errors a certain number of consecutive times.

To prevent unauthorized access from list attacks attempting to log in, we lock the account and make it inaccessible if authentication fails a certain number of times due to consecutive password errors.

The specific conditions cannot be disclosed for security reasons.

Additionally, you can set up two-step verification to prevent unauthorized access by third parties.

For more details about two-step verification, please see this article.

How to set up two-step verification for Ondoku | Explanation of activation/deactivation steps with images | Text-to-speech software Ondoku

A detailed explanation of the steps to set up two-step verification in Ondoku. It prevents unauthorized access using a confirmation code in addition to a password. It also explains the importance of backup codes and how to disable them.

Is the input text stored on the server?

The input text is stored on Ondoku's servers.

The storage period varies depending on the member's plan.

• Non-members: 1 day
• Free members: 30 days
• Paid members: Until the member deletes the history themselves

This is how it is stored.

Ondoku uses Google Cloud for its storage servers.

For free and paid members, we provide a deletion function that allows you to delete data from Ondoku's servers by deleting the reading history from your history.
* Deleting history does not increase the number of characters available for reading.

How to use the deletion and bulk deletion functions of Mojiokoshi-san and precautions. Deleting characters and data from history and servers | AI Transcription Service - Mojiokoshi-san

In Mojiokoshi-san, you can easily delete your previously read data yourself using the "Delete" function. We will introduce how to use the deletion function and bulk deletion function, along with precautions.

Which servers does Ondoku use?

Ondoku uses Google Cloud Platform (Tokyo Region).

Official Site: Google Cloud

The location is Tokyo.

Is the account set up so only I can access it?

Accounts are

• Email address
• Password

securely stored through each of these.

We recommend using strong passwords and avoiding weak passwords, passwords used on other sites, or passwords that may have been leaked.

What is a strong password?

• Setting 8 or more characters is considered ideal for creating a strong password.
• Setting 14 or more characters is recommended for even greater strength.
• Combining uppercase letters [Uppercase Letters], lowercase letters [Lowercase Letters], numbers [Numbers], and symbols [Symbols] is recommended for a strong password.

Source: https://www.benricho.org/password_meter/

Please keep each piece of information safe yourself.

Is there a risk of stored data being seen by third parties?

The read text and audio are saved on a server equipped with a strong security system, and only the logged-in user can view them.

Have you received external certification for security measures?

We have not obtained certifications such as the Privacy Mark.

Do you perform security audits?

Yes, we do.

Ondoku has conducted and passed penetration tests on a scale 10 times larger than the standards set by IPA (Information-technology Promotion Agency).

Through rigorous penetration testing by external specialized organizations, we thoroughly verify system vulnerabilities and ensure safety.

Is communication properly encrypted?

In our service, all pages are encrypted with SSL/TLS, so third parties cannot check the content.

Is Ondoku a SaaS service?

Yes, Ondoku is a SaaS service.

What is SaaS?

It is an abbreviation for "Software as a Service" and is pronounced "SaaS."
It refers to a form of providing and using software that was previously offered as packaged products as a service via the Internet.
Features of SaaS include the following:

Data can be saved on the Internet
Data can be accessed from any device, such as a PC, smartphone, or tablet
Multiple people can share the same data and even edit it
Google Workspace (formerly G Suite) and Salesforce can be cited as typical examples of SaaS-type services.
Source: https://cloud-ace.jp

Ondoku can be used from anywhere as long as there is an internet connection, on devices such as

• Computers
• Smartphones
• Tablets

What is the confidentiality policy?

Confidentiality is described in detail in the Terms of Service.

Please check Article 22: Confidentiality.

Additionally, data may be used within our company by a limited number of employees to check for errors and audio accuracy, and may be utilized as statistical data for research and development to improve voice technology.

However, we do not publicly disclose the content of the input text or created audio, nor do we provide data to third parties.

Support for providing information regarding security, etc.

When using the service at a company, depending on the organization, you may not be able to use the service unless you fill in information on a security check sheet or similar document.

Regarding answers to security check sheets, there are the following two methods:

1. Please fill it out yourself, referring to the security check sheet below.
2. If confirmation of content or entry by our company is required, we can accommodate this for a fee.

Please check here for details regarding confirmation of completed sheets and fees for paid options.
Can you fill out the answers to security-related documents?

Can you fill out the answers to security-related documents? [Ondoku] | Text-to-speech software Ondoku

If you need a security check sheet to use Ondoku, please see below.

Before contacting us, please check the FAQ and the notation based on the Act on Specified Commercial Transactions

Common concerns for users are summarized in the FAQ.

In the FAQ, we answer the following in a Q&A format:

• About usage
• About audio files and downloads
• About payment methods
• About corporate use

Most questions can be resolved through the FAQ.

Additionally, we provide detailed information about Ondoku on our blog. We also regularly post update information and news about the latest Ondoku development.

Operator information and other details are listed in the notation based on the Act on Specified Commercial Transactions.

Please make use of them.