What are Convo security features?

Convo is entirely based on proven, open standards, written by industry experts, and used for years in commercial products. The core security protocols are HTTPS/TLSv1.2 to encrypt bidirectional web sessions between customer applications and Convo, SRTP for media traffic encryption, and DTLS-SRTP for key negotiation, which the IETF defines.

Convo cryptographically signs its tokens using the RS512 algorithm, transmitted over the Authentication header using the Bearer schema. This signature can be used to validate the authenticity of the request. OAuth 2.0 standard is used for social login integration.

Convo WebRTC-compatible endpoints use the AES cipher with 128-bit keys to encrypt audio and video and HMAC-SHA1  to verify data integrity. 

Updated September 2025