Fair Trade & Ethical Sourcing

Kaltura, a video technology company, does not procure or trade physical commodities, making fair trade certifications and materials risk indices not applicable to its operations. The company maintains a Vendor Code of Conduct that is integrated as a link or incorporated by reference into its subcontractor engagement contracts and standard vendor agreements.

This code addresses fair employment practices, human rights, and the prevention of slavery and human trafficking. However, no specific percentage of suppliers covered by these clauses is provided. There is no quantitative data available for audit frequency, forced or child labour incidents, traceability coverage, remediation speed, or supplier diversity spend.

Honest & Fair Business

Kaltura has not reported any regulatory fines, violations, or compliance issues related to ethics or compliance in the past three years, nor has it faced significant fines or losses from legal proceedings concerning social, economic, or environmental laws.

The company has a whistleblower policy that allows covered persons to report suspected violations anonymously, and reports are treated confidentially. However, there is no evidence of independent investigation processes. Kaltura also has a comprehensive anti-corruption policy covering various aspects like bribery, facilitation payments, gifts, entertainment, political contributions, and third-party relationships. This policy includes due diligence procedures for third-party verification and risk assessment, requires prior approval for gifts and hospitality to government officials, and includes a 'red flags' section. The policy emphasizes due diligence on third-party business associates, including risk-based assessments and questionnaires, and references external sources like Transparency International for cultural and political risk assessments. However, the extent of independent verification of ethical claims is not specified beyond these due diligence procedures.

Planet-Friendly Business

Kaltura reported total Scope 1, 2, and 3 greenhouse gas emissions of 266.30 metric tons of carbon dioxide equivalent (MtCO2e) in 2023.

The company also reported no environmental compliance violations, significant fines, or losses from legal proceedings related to environmental laws and regulations.

Respect for Cultures & Communities

Kaltura's video platform is available in 25 languages

and provides AI-based translations and dubbing, supporting strong local language support. The company has a grievance reporting system with multiple options, including in-person, direct contact with General Counsel, a 24/7 third-party ethics hotline, and an internal online portal. Kaltura partners with 8 community organizations, including gender equality groups, diverse recruitment initiatives, and environmental organizations. The company also supplies technological infrastructure to a non-profit offering TV channels in native languages to Holocaust survivors, which is a form of cultural preservation, but the rubric's 0 tier for this KPI is 'No specific cultural preservation funding (not applicable)', which fits as this is a specific initiative rather than a dedicated funding percentage. No cultural appropriation incidents or cultural site disruptions were reported. The company's business model (cloud-based software) does not inherently involve operations that would typically impact cultural contexts requiring specific protocols like cultural impact assessments or FPIC processes.

Safe & Smart Tech

Kaltura reports no recent data breaches or incidents.

The company outlines AI principles focused on customer data protection, accountability, transparency, fairness, security, and continuous improvement, but lacks specific metrics or details on implementation. Kaltura is certified under the US Department of Commerce’s Data Privacy Framework (DPF) and holds ISO/IEC 27001:2013, ISO 27799:2008, SSAE 16 / SOC 1 Type II, and SOC 2 Type II certifications. The company uses AES encryption for content delivery, encryption at rest for secure storage, and transportation layer encryption (HTTPS). Kaltura states efforts to mitigate potential biases throughout the AI development lifecycle but does not provide specifics on audit frequency or methodology. It aims for clear communication regarding AI use and customer control over AI features. Kaltura explicitly states it does not use customer data to train its AI models, nor does it share customer data with third parties for training their AI models. Customers can set custom deletion rules and schedules for content and can request user data deletion. Kaltura uses user authentication and session verification. The company incorporates security-related activities into its Software Development Life Cycle (SDLC), including developer training, secure code practices, regular vulnerability scans, and annual penetration tests. Kaltura uses HTML Purifier to sanitize user-generated content for XSS prevention. The company is committed to GDPR compliance and offers tools to support customer compliance. Kaltura collects data only as necessary for service provision.