NEXT utilizes industry-standard cloud infrastructure vendors to provide the NEXT service. NEXT's infrastructure is primarily managed through Amazon Web Services (AWS), and is complemented by additional secondary infrastructure vendors to provide specific features within the NEXT application, like natural language processing or transcription.
Primary infrastructure
Principally, the NEXT application leverages Amazon Web Services (AWS) for infrastructure hosting.
The NEXT application is hosted in the Amazon Web Services AWS eu-west-1 region located in Ireland in the European Union.
Enterprise clients can choose to host their Workspaces in their region of choice. Learn more at Data storage location (data residency).
Amazon Web Services has been granted formal certification, attestation, and audit reports for ISO 27001, ISO 27017, ISO 27018, SOC 1, SOC 2, SOC 3, and more – the full list of compliance resources is available on the Amazon Web Services security page.
Feature-specific infrastructure
NEXT also makes use of secondary cloud infrastructure providers to process data for specific features of the web application. The use of these features is optional within the web application.
Data is sent to these providers temporarily and stored for a brief period of time in order to perform the functionality of the feature, and is subsequently permanently deleted after the functionality has been performed. No data is permanently stored or hosted within these infrastructure providers.
Video/audio transcription
You can choose between AssemblyAI, Rev or Gladia for your video/audio transcriptions.
Upon use of the NEXT web application’s automated transcription feature, the audio/video file to be transcribed is sent to selected provider. All communication is encrypted in transit using HTTPS and Transport Layer Security 1.2. Audio/video files temporarily stored with the provider are encrypted at rest.
Audio/video files sent for transcription are deleted immediately through explicit request after the finalized transcript is received by NEXT application. In addition to this, an automated deletion policy has been configured to automatically delete all completed transcription jobs sent to the provider every 24 hours.
All AssemblyAI data is processed using Amazon Web Services AWS regions in the United States or Dublin, Ireland in the European Union.
All Rev data is hosted and processed using Amazon Web Services AWS eu-central-1 region located in Frankfurt, Germany in the European Union or using Amazon Web Services AWS regions in the United States.
All Gladia data is hosted and processed using OVHcloud located in Gravelines, France in the European Union.
Artificial Intelligence (AI)
Standard endpoints for AI
NEXT uses OpenAI (US data residency) or Microsoft AzureAI (EU data residency and Canada data residency) to take advantage of the latest advancements in generative AI and language models. The data submitted through NEXT AI is used for the sole purpose of providing you with the NEXT AI features.
We do not allow any subprocessor to use client data for training their models or any other purposes.
OpenAI and Microsoft AzureAI complies with GDPR and CCPA. We can execute a Data Processing Agreement if your organization or use case requires it. The OpenAI API and the Microsoft AzureAI API have been evaluated by a third-party security auditor and is SOC 2 Type 2 compliant.
The full list of compliance resources is available here for OpenAI and here for Microsoft AzureAI.
Customer-specific endpoints for AI
Enterprise clients can choose to use their customer-specific ChatGPT Enterprise or Microsoft AzureAI Enterprise endpoints.