Snapshot 229037
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Omilia Omilia is an enterprise Agentic CX company, built on over two decades of conversational AI innovation, powering 1 billion+ conversations in 30 languages around the globe. Responsibility, governance, compliance, and security are embedded in how we build, operate, and grow. corporate-grc@omilia.com Privacy PolicyOpens in new tab Here you can find our compliance artifacts, request documentation, and view high-level details on controls we adhere to. To access sensitive documents, please click the "request access" button at the top of the page and complete the request form. This access will also enable the Trust Center AI feature, allowing you to query our documentation. Compliance ISO 27001:2022 SOC 2 EU AI ACT Digital Operational Resilience Act GDPR NIS 2 Directive PCI DSS 4.0.1 CCPA NIST AI Risk Management Framework Updates View all Privacy Notice of new subprocessor: Observe Published November 4, 2026 Omilia intends to add Snowflake Inc. (Observe, a Snowflake company; formerly Observe, Inc.) (“Observe”) to its Subprocessor List to support platform observability for the Omilia Cloud Platform (OCP): collecting, storing and analysing system logs, metrics and traces so we can monitor service health, alert on issues and troubleshoot incidents. The proposed engagement details are: Processing location(s): United States, Canada, EU (Observe/Snowflake environment hosted on AWS) Customer personal data processed: Technical and operational data in platform logs, which may include telephone numbers (for example, numbers in SIP/call-signalling logs), IP addresses and system identifiers. No call audio or recordings. Affected services: Omilia Cloud Platform (OCP) services in all hosted regions Proposed start date: 7 December 2026 This announcement provides advance notice of the proposed addition in accordance with Section 7.2 of Omilia’s Data Processing Addendum. The addition will be reflected in Omilia’s Subprocessor List. If you have questions or wish to raise an objection under your applicable DPA, please contact corporate-grc@omilia.com during the notice period, providing the relevant details and any documented data-protection concerns. We will work with you in good faith to address timely objections in accordance with your agreement. — The Omilia Team Security Response to PHP2Shell (CVE-2026-109618 / CVE-2026-109619) Published October 27, 2026 On 21 October 2026, industry reports highlighted critical remote code execution vulnerabilities in certain PHP versions, commonly referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Omilia reviewed its environment. An internal third-party call-monitoring component used a vulnerable PHP runtime. This component is not part of the OCP product stack. We upgraded PHP to version 8.3.36 across the affected environments and verified the upgrade. Omilia’s OCP product does not use PHP and was not affected. We have identified no confirmed exploitation of these vulnerabilities against Omilia systems. We continue related hardening and monitoring improvements through our internal problem-management process. General Welcome to Omilia's Trust Center! Published August 27, 2026 Welcome to Omilia's Trust Center! We've launched our Trust Center as the single source for Omilia's security, privacy, and compliance posture. Here you'll find our certifications (ISO 27001, SOC 2 Type II, PCI DSS, HIPAA, GDPR alignment), policy summaries, subprocessor list, and answers to the questions we get most often from customers and prospects. The goal: give you self-service access to the documentation you need for due diligence and vendor risk reviews, without waiting on a request cycle. More sections and documents will be added on a rolling basis. FAQ View all Subprocessors View all AWS • Cloud provider EU, USA, Canada Cloud Service Provider - IaaS Snowflake • Data storage and processing EU, USA, Canada Analytical Data Warehouse Microsoft Azure • Cloud Service provider - PaaS EU Cloud Service provider - PaaS Observe • Cloud monitoring EU, USA, Canada Observability platform (log ingest, alerting, monitoring) for OCP telemetry. Resources View all Security, Certifications & Resilience ISO/IEC 27001:2022 Certificate ISO/IEC 27001: 2022 Statement of Applicability 2025 SOC 2 Type 2 Report SOC 2 Type II Bridge (Gap) Letter View 8 more Privacy & Data Protection Data Processing Addendum (DPA) Candidates Data Protection Notice Opens in new tab DPIA, TIA, DSAR View 4 more AI Governance AI Deployer Responsibility Guidelines per the EU AI Act High-Risk AI Systems Instructions For Use EU AI Act Compliance Status AI Models Governance Framework Summary View 2 more Legal & Commercial Mutual NDA Americas Mutual NDA Europe View 2 more Conduct & Ethics Whistleblowing Channel Opens in new tab Code of Conduct Conflict of Interest Policy Diversity, Equality, Inclusion & Anti-Discrimination Policy View 4 more Accessibility Omilia Cloud Platform Accessibility.pdf OCP VPAT WCAG2.2 July 2026 Accessibility Conformance Report (VPAT) — Omilia.com Corporate Websites: Omilia.com & ocp.ai Omilia.com Privacy Notice Opens in new tab Omilia.com Cookies Policy Opens in new tab Omilia.com Legal Notice & Terms of Use Opens in new tab ocp.ai Opens in new tab View 1 more Corporate/Onboarding Certificate of Incorporation / Registered Office Tax Residency Certificate Form W-8BEN-E Internal Audit Policy Other resources Read more about Notice of new subprocessor: Observe Omilia Omilia is an enterprise Agentic CX company, built on over two decades of conversational AI innovation, powering 1 billion+ conversations in 30 languages around the globe. Responsibility, governance, compliance, and security are embedded in how we build, operate, and grow. corporate-grc@omilia.com Privacy PolicyOpens in new tab Here you can find our compliance artifacts, request documentation, and view high-level details on controls we adhere to. To access sensitive documents, please click the "request access" button at the top of the page and complete the request form. This access will also enable the Trust Center AI feature, allowing you to query our documentation. Compliance ISO 27001:2022 SOC 2 EU AI ACT Digital Operational Resilience Act GDPR NIS 2 Directive PCI DSS 4.0.1 CCPA NIST AI Risk Management Framework Updates View all Privacy Notice of new subprocessor: Observe Published November 4, 2026 Omilia intends to add Snowflake Inc. (Observe, a Snowflake company; formerly Observe, Inc.) (“Observe”) to its Subprocessor List to support platform observability for the Omilia Cloud Platform (OCP): collecting, storing and analysing system logs, metrics and traces so we can monitor service health, alert on issues and troubleshoot incidents. The proposed engagement details are: Processing location(s): United States, Canada, EU (Observe/Snowflake environment hosted on AWS) Customer personal data processed: Technical and operational data in platform logs, which may include telephone numbers (for example, numbers in SIP/call-signalling logs), IP addresses and system identifiers. No call audio or recordings. Affected services: Omilia Cloud Platform (OCP) services in all hosted regions Proposed start date: 7 December 2026 This announcement provides advance notice of the proposed addition in accordance with Section 7.2 of Omilia’s Data Processing Addendum. The addition will be reflected in Omilia’s Subprocessor List. If you have questions or wish to raise an objection under your applicable DPA, please contact corporate-grc@omilia.com during the notice period, providing the relevant details and any documented data-protection concerns. We will work with you in good faith to address timely objections in accordance with your agreement. — The Omilia Team Security Response to PHP2Shell (CVE-2026-109618 / CVE-2026-109619) Published October 27, 2026 On 21 October 2026, industry reports highlighted critical remote code execution vulnerabilities in certain PHP versions, commonly referred to as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). Omilia reviewed its environment. An internal third-party call-monitoring component used a vulnerable PHP runtime. This component is not part of the OCP product stack. We upgraded PHP to version 8.3.36 across the affected environments and verified the upgrade. Omilia’s OCP product does not use PHP and was not affected. We have identified no confirmed exploitation of these vulnerabilities against Omilia systems. We continue related hardening and monitoring improvements through our internal problem-management process. General Welcome to Omilia's Trust Center! Published August 27, 2026 Welcome to Omilia's Trust Center! We've launched our Trust Center as the single source for Omilia's security, privacy, and compliance posture. Here you'll find our certifications (ISO 27001, SOC 2 Type II, PCI DSS, HIPAA, GDPR alignment), policy summaries, subprocessor list, and answers to the questions we get most often from customers and prospects. The goal: give you self-service access to the documentation you need for due diligence and vendor risk reviews, without waiting on a request cycle. More sections and documents will be added on a rolling basis. FAQ View all Subprocessors View all AWS • Cloud provider EU, USA, Canada Cloud Service Provider - IaaS Snowflake • Data storage and processing EU, USA, Canada Analytical Data Warehouse Microsoft Azure • Cloud Service provider - PaaS EU Cloud Service provider - PaaS Observe • Cloud monitoring EU, USA, Canada Observability platform (log ingest, alerting, monitoring) for OCP telemetry. Resources View all Security, Certifications & Resilience ISO/IEC 27001:2022 Certificate ISO/IEC 27001: 2022 Statement of Applicability 2025 SOC 2 Type 2 Report SOC 2 Type II Bridge (Gap) Letter View 8 more Privacy & Data Protection Data Processing Addendum (DPA) Candidates Data Protection Notice Opens in new tab DPIA, TIA, DSAR View 4 more AI Governance AI Deployer Responsibility Guidelines per the EU AI Act High-Risk AI Systems Instructions For Use EU AI Act Compliance Status AI Models Governance Framework Summary View 2 more Legal & Commercial Mutual NDA Americas Mutual NDA Europe View 2 more Conduct & Ethics Whistleblowing Channel Opens in new tab Code of Conduct Conflict of Interest Policy Diversity, Equality, Inclusion & Anti-Discrimination Policy View 4 more Accessibility Omilia Cloud Platform Accessibility.pdf OCP VPAT WCAG2.2 July 2026 Accessibility Conformance Report (VPAT) — Omilia.com Corporate Websites: Omilia.com & ocp.ai Omilia.com Privacy Notice Opens in new tab Omilia.com Cookies Policy Opens in new tab Omilia.com Legal Notice & Terms of Use Opens in new tab ocp.ai Opens in new tab View 1 more Corporate/Onboarding Certificate of Incorporation / Registered Office Tax Residency Certificate Form W-8BEN-E Internal Audit Policy Other resources