Moreover, because VoiceXML is built upon existing Internet standards, companies can literally reuse their existing Web-based framework for security, authentication, and personalization when extending services to the phone. Businesses can reuse their Web authentication architecture. Businesses retain full control of corporate data and applications. Businesses retain complete control of their data and application code at their facility. Vendors that offer outsourced VoiceXML infrastructure solutions are deeply incented, and typically contractually commit, to deal appropriately with sensitive log data collected on behalf of enterprise customers.
Network security is equally important as on the Web.
Companies should employ industry best practices such as multiple isolated networks, firewalls, IP filtering, load balancing, and intrusion detection to ensure that data and service quality are not compromised. People are comfortable talking on the phone. From a security perspective, using automated voice applications is equivalent or better than talking to customer service agents who may be anywhere and whose discretion is not guaranteed. Dynamically generated grammars make it possible to create applications that are always current. For example, a voice-activated dialing application could directly integrate with a corporate LDAP directory, giving callers instant access to the newest names and changes.