Version 1.0 · 22 October 2026
CyberStanding is operated by Cyber Assurance Group, Inc. In this release, "CyberStanding" means Cyber Assurance Group, Inc., doing business as CyberStanding.
You read three short number codes aloud on your phone. Our voice verification provider, VSFT Holdings, Inc. (ValidSoft), creates a voiceprint from those recordings: a mathematical model of your voice. A voiceprint is a biometric identifier. CyberStanding, through ValidSoft, collects and stores it.
The voiceprint is used for one purpose. When a step you take for the business asks for a voice check (approving a payment change, signing its records, declaring an incident), you read one short code, and ValidSoft confirms that you are a live person and that the voice matches your voiceprint. It is used for nothing else.
ValidSoft holds the voiceprint on CyberStanding's behalf. ValidSoft keeps each recording for up to two weeks for troubleshooting, then deletes it. CyberStanding keeps a reference to the voiceprint, the result of each check and a fingerprint (a one-way hash) of each recording. It does not keep the recordings or the voiceprint.
Your voiceprint is kept only while you may be asked for a voice check. It is permanently destroyed within 30 days of the first of: your request; your removal from the business's People list; the business's Credential ending; or, at the latest, three years after your last voice check. The full schedule is the voiceprint retention and destruction policy.
Your voiceprint and recordings are never sold, leased, traded or otherwise used for profit. They are disclosed only to ValidSoft, to complete a step you asked for, with your consent, or where the law requires it.
You do not have to give a voiceprint. Without one, the business can name another person for a step that needs a voice check, and steps that allow it are recorded without one.
Write to registry@mycyberstanding.com. Your voiceprint is then destroyed as section 4 describes.
By selecting I agree, you give your written release for your voiceprint to be collected, stored and used as described here. The version of this text, its fingerprint, the time, your email address and the network address are sealed into the business's Credential record.