Vonage Video API (formerly OpenTok / TokBox)
Vonage Video API is a WebRTC platform for embedded real time audio and video calls, previously known as OpenTok or TokBox. It processes highly sensitive audio and video streams in real time, and any optional recording or analytics feature triggers full GDPR and ePrivacy obligations for EU deployments.
What does Vonage Video API (formerly OpenTok / TokBox) do?
What Vonage Video API is and how it works
Vonage Video API, previously branded OpenTok and originally developed by TokBox, is a WebRTC platform that lets developers embed real time audio and video calls into web and mobile applications. It is now operated by Vonage, a US subsidiary of Ericsson. The service handles signalling, session creation, media routing via Selective Forwarding Units, optional cloud recording and live streaming.
A typical integration loads the opentok.js client, requests access to the camera and microphone via the browser, opens a WebRTC peer connection to a Vonage media router and exchanges DTLS SRTP encrypted streams with other participants. Session tokens are issued by your server, so most state lives in memory rather than in browser cookies.
Data collected and storage on the device
Vonage Video API mainly processes real time audio and video streams, signalling messages, ICE candidates (which expose IP addresses), session identifiers, device fingerprints for diagnostics and, if enabled, recorded archives. Browser storage is limited: the SDK may write a small amount of local storage for device selection and quality tuning, and the underlying media servers see all IP addresses of participants.
GDPR and ePrivacy legal basis
For the core video call requested by the user, the legal basis is typically Art. 6(1)(b) GDPR, performance of a contract. Optional features such as session recording, transcription, AI noise suppression or analytics require Art. 6(1)(a) GDPR consent and, where they store or read information on the device, Art. 5(3) ePrivacy consent. Children, patients and other special categories trigger additional obligations under Art. 9 GDPR.
International data transfers and Schrems II
Vonage is headquartered in New Jersey and owned by Ericsson. Although Vonage operates European media edges to reduce latency, the control plane, billing data and session metadata are accessed from the US. Transfers rely on the EU US Data Privacy Framework, supplemented by Standard Contractual Clauses, with media level encryption (DTLS SRTP) as the main technical supplementary measure under Schrems II.
Practical compliance steps
Sign a Data Processing Agreement with Vonage, restrict media regions to the EU where possible, request explicit consent before any recording, store archives in EU regions, encrypt archives at rest, document a DPIA, inform users about Vonage as a processor, the US transfer and their rights, and provide a clear in app indicator whenever audio or video is being recorded or transcribed.
Vonage Video API (formerly OpenTok / TokBox) and the GDPR
Vonage Video API (formerly OpenTok / TokBox) is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Art. 6(1)(b) GDPR (performance of a contract) for the core video session requested by the user, complemented by Art. 6(1)(a) GDPR (consent) for any optional analytics, recording or archiving features and Art. 6(1)(f) GDPR (legitimate interest) for security and abuse prevention logs.
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive, TTDSG, LOPDGDD, EDPB Guidelines 02/2023 on the technical scope of Art. 5(3) ePrivacy, Schrems II ruling, EU US Data Privacy Framework, Standard Contractual Clauses
Impact assessment (DPIA)
A DPIA is generally required for Vonage Video API integrations because real time audio and video are personal data of a particularly sensitive nature, and may include children, patients or vulnerable users in telehealth, education or customer service scenarios. The DPIA must analyse media routing paths, US transfers, session recording features, retention of archives, encryption (DTLS SRTP), access controls to the Vonage dashboard, and the impact of any AI or transcription add ons.
Sample text for your banner
Our video call is powered by Vonage Video API (formerly OpenTok). Your camera and microphone streams pass through Vonage media servers, which can be located outside the European Economic Area, including in the United States. By starting the call you agree to this processing. If we record the session, we will request a separate, clearly identified consent before any recording begins.
What Vonage Video API (formerly OpenTok / TokBox) sets and contacts
- Tracking method
- WebRTC media streams, session tokens, server side signalling and minimal browser storage
- Server location
- United States (Vonage / Ericsson, with global edge media routers operated by Vonage in multiple regions including the US, EU and Asia)
- Cookieless mode available
- Yes
- Data transferred outside the EU
- Audio, video and signalling data are routed through Vonage media servers and APIs. Vonage is a US company owned by Ericsson, and although media can be routed via European edges, the control plane and account level data (session logs, API metadata) are processed in the United States. Transfers rely on the EU US Data Privacy Framework and Standard Contractual Clauses.
Cookies set (5)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| OT_AnonymousId | local_storage | Persistent | Anonymous client identifier used by the opentok.js SDK to correlate diagnostic events from the same browser. |
| opentok_session | session | Session | Holds the in memory session token that authorises the WebRTC connection to the Vonage media router. |
| loglevel | local_storage | Persistent | Stores the verbosity level for the Vonage Video SDK logs in the browser. |
| tb_device_prefs | local_storage | Persistent | Remembers the last selected microphone, camera and speaker for the current user. |
| ot_logger | first_party | 1 year | Set on tokbox.com when telemetry is enabled to collect aggregated client side performance metrics. |
Third-party domains contacted (6)
api.opentok.comtokbox.comstatic.opentok.commantis.tokbox.comvideo.api.vonage.comhlg.tokbox.com
Frequently asked questions about Vonage Video API (formerly OpenTok / TokBox)
Can't find your question? Write to us, we answer fast.
Which cookies does Vonage Video API set?
Vonage Video API itself relies mostly on session tokens and limited local storage for device selection and quality stats. The Vonage corporate domains (tokbox.com, vonage.com) may set analytics cookies if you load assets from them directly, in which case standard consent rules apply.
Is consent required to use Vonage Video API?
For the video call itself, consent is generally not the legal basis: you rely on Art. 6(1)(b) GDPR (contract). However, you must obtain explicit consent before enabling recording, transcription, AI processing or analytics, and before storing any non essential data on the user device.
What is the legal basis for processing audio and video?
The core video session is grounded in Art. 6(1)(b) GDPR. Recording, transcription and analytics rely on Art. 6(1)(a) GDPR. Security and fraud prevention logs can rely on Art. 6(1)(f) GDPR. Sensitive use cases (health, minors) require additional Art. 9 GDPR safeguards.
Does Vonage transfer my data to the United States?
Yes. Vonage is a US company owned by Ericsson. Even when media is routed through EU edges, the control plane, dashboard and metadata are accessible from the US. Transfers rely on the EU US Data Privacy Framework and Standard Contractual Clauses, with DTLS SRTP encryption as a supplementary measure.
Do I need a DPIA for Vonage Video API?
Yes, in most cases. Video and audio are sensitive personal data, the volume can be large, and certain use cases (telehealth, education, customer support) involve vulnerable users. A DPIA is required under Art. 35(3) GDPR criteria and EDPB guidance.
How do I implement Vonage Video API in a compliant way?
Sign a Vonage Data Processing Agreement, prefer EU media regions, encrypt archives, restrict admin access, request explicit consent for recording, display a clear recording indicator, document a DPIA and reflect Vonage in your privacy policy as a US processor.
Are there EU based alternatives to Vonage Video API?
Yes. LiveKit Cloud (EU regions), Daily.co with EU regions, Jitsi as a Service from 8x8, Whereby (Norway) and several self hosted options like Jitsi Meet or mediasoup are EU friendly alternatives with lower Schrems II exposure.
How do I update my cookie and privacy policy for Vonage?
Document Vonage / OpenTok as a processor, list any local storage and signalling endpoints, disclose the US transfer mechanism (EU US Data Privacy Framework plus SCCs), mention recording features when applicable and give users a way to refuse non essential add ons.
X-Clacks-Overhead
X-Clacks-Overhead is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. X-Clacks-Overhead is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, X-Clacks-Overhead offers reliable solutions that scale with organizational needs and evolving web standards.
Facil-iti
Facil-iti is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Facil-iti supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Facil-iti ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
%22%3E%0A%20%20%20%20%3Cpath%20id%3D%22path6%22%20d%3D%22M%2067.02%2C0%2073%2C0%20c%200%2C2.67%200%2C5.33%200%2C8%2010.7%2C0.06%2021.39%2C-0.11%2032.08%2C0.06%202.28%2C-0.23%204.07%2C1.54%203.86%2C3.82%200.17%2C19.7%20-0.04%2C39.41%200.1%2C59.11%20-0.1%2C2.02%200.2%2C4.26%20-0.97%2C6.05%20-1.46%2C1.04%20-3.35%2C0.91%20-5.05%2C0.99%20C%2093.01%2C77.98%2083.01%2C78%2073%2C78%20c%200%2C2.67%200%2C5.33%200%2C8%20l%20-6.25%2C0%20C%2051.53%2C83.22%2036.27%2C80.67%2021.02%2C78%2021.01%2C54.67%2021.02%2C31.34%2021.02%2C8.02%2036.35%2C5.34%2051.69%2C2.73%2067.02%2C0%20z%22%20inkscape%3Aconnector-curvature%3D%220%22%20style%3D%22fill%3A%232a5699%22%2F%3E%0A%20%20%20%20%3Cpath%20id%3D%22path46%22%20d%3D%22m%2073%2C11%20c%2011%2C0%2022%2C0%2033%2C0%200%2C21.33%200%2C42.67%200%2C64%20-11%2C0%20-22%2C0%20-33%2C0%200%2C-2.67%200%2C-5.33%200%2C-8%208.67%2C0%2017.33%2C0%2026%2C0%200%2C-1.33%200%2C-2.67%200%2C-4%20-8.67%2C0%20-17.33%2C0%20-26%2C0%200%2C-1.67%200%2C-3.33%200%2C-5%208.67%2C0%2017.33%2C0%2026%2C0%200%2C-1.33%200%2C-2.67%200%2C-4%20-8.67%2C0%20-17.33%2C0%20-26%2C0%200%2C-1.67%200%2C-3.33%200%2C-5%208.67%2C0%2017.33%2C0%2026%2C0%200%2C-1.33%200%2C-2.67%200%2C-4%20-8.67%2C0%20-17.33%2C0%20-26%2C0%200%2C-1.67%200%2C-3.33%200%2C-5%208.67%2C0%2017.33%2C0%2026%2C0%200%2C-1.33%200%2C-2.67%200%2C-4%20-8.67%2C0%20-17.33%2C0%20-26%2C0%200%2C-1.67%200%2C-3.33%200%2C-5%208.67%2C0%2017.33%2C0%2026%2C0%200%2C-1.33%200%2C-2.67%200%2C-4%20-8.67%2C0%20-17.33%2C0%20-26%2C0%200%2C-1.67%200%2C-3.33%200%2C-5%208.67%2C0%2017.33%2C0%2026%2C0%200%2C-1.33%200%2C-2.67%200%2C-4%20-8.67%2C0%20-17.33%2C0%20-26%2C0%200%2C-2.33%200%2C-4.67%200%2C-7%20z%22%20inkscape%3Aconnector-curvature%3D%220%22%20style%3D%22fill%3A%23ffffff%22%2F%3E%0A%20%20%20%20%3Cpath%20id%3D%22path88%22%20d%3D%22m%2041.68%2C28.67%20c%201.9%2C-0.11%203.8%2C-0.19%205.7%2C-0.29%201.33%2C6.75%202.69%2C13.49%204.13%2C20.21%201.13%2C-6.94%202.38%2C-13.86%203.59%2C-20.79%202%2C-0.07%204%2C-0.18%205.99%2C-0.3%20-2.26%2C9.69%20-4.24%2C19.46%20-6.71%2C29.09%20-1.67%2C0.87%20-4.17%2C-0.04%20-6.15%2C0.1%20-1.33%2C-6.62%20-2.88%2C-13.2%20-4.07%2C-19.85%20-1.17%2C6.46%20-2.69%2C12.86%20-4.03%2C19.28%20-1.92%2C-0.1%20-3.85%2C-0.22%20-5.78%2C-0.35%20-1.66%2C-8.8%20-3.61%2C-17.54%20-5.16%2C-26.36%201.71%2C-0.08%203.43%2C-0.15%205.14%2C-0.21%201.03%2C6.37%202.2%2C12.71%203.1%2C19.09%201.41%2C-6.54%202.85%2C-13.08%204.25%2C-19.62%20z%22%20inkscape%3Aconnector-curvature%3D%220%22%20style%3D%22fill%3A%23ffffff%22%2F%3E%0A%20%20%3C%2Fg%3E%0A%3C%2Fsvg%3E)
Microsoft Word
Microsoft Word is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Microsoft Word supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Microsoft Word ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
GuideIT
GuideIT is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. GuideIT offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, GuideIT empowers organizations to optimize strategy and maximize return on investment.
%22%3E%3Cpath%20d%3D%22m35.0487%2066.7578c17.5124%200%2031.7091-14.1967%2031.7091-31.7091%200-17.5125-14.1967-31.7091-31.7091-31.7091-17.5125%200-31.7091%2014.1966-31.7091%2031.7091%200%2017.5124%2014.1966%2031.7091%2031.7091%2031.7091z%22%20fill%3D%22%23fff%22%2F%3E%3Cpath%20d%3D%22m34.8273%206.03667c-5.2598%200-10.1044%201.38417-14.5337%203.87567-4.4293%202.62996-7.8898%206.09036-10.38126%2010.51966-2.62992%204.4293-3.87567%209.1355-3.87567%2014.3953%200%205.2599%201.24575%2010.1045%203.87567%2014.5338%202.49146%204.4293%205.95196%207.8898%2010.38126%2010.3813%204.4293%202.6299%209.2739%203.8756%2014.5337%203.8756%205.2599%200%209.9661-1.2457%2014.3954-3.8756%204.4293-2.4915%207.8897-5.952%2010.5197-10.3813%202.4915-4.4293%203.8756-9.2739%203.8756-14.5338%200-5.2598-1.3841-9.966-3.8756-14.3953-2.63-4.4293-6.0904-7.8897-10.5197-10.51966-4.4293-2.4915-9.1355-3.87567-14.3954-3.87567zm0-5.53667c6.0904%200%2011.9039%201.661%2017.1637%204.70617%205.2599%203.04517%209.4124%207.19763%2012.4575%2012.45753%203.0452%205.2598%204.7062%2011.0733%204.7062%2017.1636%200%206.2288-1.661%2011.9039-4.7062%2017.1637-3.0451%205.2599-7.1976%209.5508-12.4575%2012.5959-5.2598%203.0452-11.0733%204.5678-17.1637%204.5678-6.2287%200-11.9038-1.5226-17.1636-4.5678-5.2599-3.0451-9.55078-7.336-12.59595-12.5959-3.04517-5.2598-4.56775-10.9349-4.56775-17.1637%200-6.0903%201.52258-11.9038%204.56775-17.1636%203.04517-5.2599%207.33605-9.41236%2012.59595-12.45753%205.2598-3.04517%2010.9349-4.70617%2017.1636-4.70617zm0%207.75134c4.7062%200%209.1356%201.24575%2013.2881%203.59886%204.014%202.4915%207.1976%205.6751%209.6891%209.6891%202.3531%204.1525%203.5989%208.5819%203.5989%2013.288%200%204.8446-1.2458%209.274-3.5989%2013.2881-2.4915%204.1525-5.6751%207.336-9.6891%209.6891-4.1525%202.4915-8.5819%203.5989-13.2881%203.5989-4.8445%200-9.2739-1.1074-13.288-3.5989-4.1525-2.3531-7.336-5.5366-9.6891-9.6891-2.49153-4.0141-3.59886-8.4435-3.59886-13.2881%200-4.7061%201.10733-9.1355%203.59886-13.288%202.3531-4.014%205.5366-7.1976%209.6891-9.6891%204.0141-2.35311%208.4435-3.59886%2013.288-3.59886zm0%206.09036c-1.3841%200-2.6299.5536-3.5988%201.5226-.9689.9689-1.3842%202.0762-1.3842%203.4604%200%201.3841.4153%202.6299%201.3842%203.5988s2.2147%201.3842%203.5988%201.3842c1.3842%200%202.4915-.4153%203.4605-1.3842.9689-.9689%201.5225-2.2147%201.5225-3.5988%200-1.3842-.5536-2.4915-1.5225-3.4604-.969-.969-2.0763-1.5226-3.4605-1.5226zm16.3332%2013.5648c.5537%200%20.9689-.4152%201.2458-.9689.2768-.5537.4152-1.1073.2768-1.661s-.4152-1.1073-.9689-1.3842c-.5537-.2768-1.1073-.4152-1.661-.2768-4.7062%201.1073-8.305%201.7994-10.7965%202.0762-3.0452.4153-5.9519.4153-8.8587%200-2.6299-.2768-6.2287-.9689-10.7965-2.0762-.6921-.1384-1.2457%200-1.7994.2768-.5537.2769-.8305.8305-.9689%201.3842s0%201.1073.2768%201.661.8305.8305%201.3842.9689c4.8446%201.1073%208.5818%201.9378%2011.3501%202.2147%200%205.8135-.4152%2010.3812-.9689%2013.7032-.4152%202.0763-1.1073%204.4294-2.0762%206.9209l-.4153.8305c-.2768.6921-.1384%201.3841.1384%201.9378.2769.6921.6921%201.1073%201.3842%201.3842.5537.2768%201.2458.1384%201.7994-.1384.5537-.2769%201.1074-.6921%201.3842-1.2458l.4152-.9689c.5537-1.661%201.1074-3.1836%201.5226-4.2909.4153-1.661.8305-3.4604%201.1074-5.6751h1.3841c.2769%202.2147.5537%204.0141%201.1074%205.6751.2768%201.1073.8305%202.6299%201.5225%204.2909l.4153.9689c.2768.5537.6921.9689%201.2457%201.2458.5537.2768%201.2458.4152%201.9379.1384.5536-.2769%201.1073-.6921%201.3842-1.3842.2768-.5537.2768-1.2457.1384-1.9378l-.4153-.8305c-1.1073-2.4915-1.7994-4.8446-2.0762-6.9209-.6921-3.322-.969-7.8897-.969-13.7032%202.63-.2769%206.3672-1.1074%2011.3502-2.2147z%22%20fill%3D%22%23574cd5%22%2F%3E%3C%2Fg%3E%3C%2Fsvg%3E)
Accessibly
Accessibly is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Accessibly supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Accessibly ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Developing Azerbaijan
Developing Azerbaijan is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Developing Azerbaijan offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Developing Azerbaijan empowers organizations to optimize strategy and maximize return on investment.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.