Security and privacy, built into the product.

Microphones and invisible links deserve care. Here is how SonarTag handles both.

Microphone only after a tap: The Listener asks for microphone access only when someone taps to listen, and shows clearly while it is listening.
No silent listening: The web Listener never listens in the background, and listening stops on its own.
Minimal collection: Raw microphone audio is not sent to our servers during normal listening, and analytics use the least data needed.
Verifiable identities: Each Audio Link carries an identity the platform can verify, so look-alike signals are not trusted.
Destination checks: Destinations are checked for unsafe links before anyone is sent there, and the domain is shown before a listener opens it.
Workspace permissions: Roles decide who can create, publish or only view, and access is enforced on the server and in the database.
Audit trail: Destination changes and sensitive actions are recorded and cannot be edited afterwards.
Your uploads stay private: Uploaded audio is private by default and used only to create your Audio Links. You confirm you have the right to use it.

Report abuse or a vulnerability

If an Audio Link leads somewhere it should not, or you found a security issue, tell us. Every report is reviewed.