Enterprise-grade security for every call

Your callers trust you with their information. We take that responsibility seriously, with encryption, compliance, and transparency at every level.

SOC 2

Type II ready

HIPAA

Ready architecture

AES-256

Encryption at rest

Data residency

Regional isolation

Encryption

Your data is protected at every layer

AES-256 at rest

All stored data, call recordings, transcripts, and configuration, is encrypted with AES-256, the standard used by governments and financial institutions.

TLS 1.3 in transit

Every connection between your browser, our API, and our infrastructure is secured with TLS 1.3, preventing eavesdropping and tampering.

End-to-end call encryption

Voice data is encrypted from the moment it enters our system to the moment it is stored or discarded, with keys rotated regularly.

Access control

Granular permissions for every team member

Row Level Security

Database-level isolation ensures each organization can only access its own data. No shared tables, no cross-tenant leaks.

Role-based access

Assign Owner, Admin, or Member roles with different permission sets. Control who can configure agents, view transcripts, or manage billing.

Team permissions

Create teams within your organization and scope access to specific agents, industries, or dashboard sections.

Audit logging

Complete visibility into every action

Comprehensive action logging

Every login, configuration change, agent update, and data export is logged with timestamp, user, IP address, and action details.

Exportable audit trail

Download your full audit log as CSV or JSON for compliance reviews, incident investigations, or internal governance.

Real-time alerts

Set up notifications for sensitive actions, bulk data exports, permission changes, or unusual login patterns.

Data handling

You control your data, always

Data retention policies

Configure how long call recordings and transcripts are stored. Choose 30, 90, or 180 days, or a custom retention period.

Right to deletion

Request complete deletion of your data at any time. We process deletion requests within 72 hours and provide written confirmation.

Data portability

Export all your data, recordings, transcripts, analytics, and configurations, in standard formats (JSON, CSV, WAV) at any time.

Infrastructure

Enterprise-grade reliability and testing

SOC 2 Type II readiness

Our controls and processes are designed to meet SOC 2 Type II requirements for security, availability, and confidentiality.

Regular penetration testing

We engage independent security firms for quarterly penetration tests and continuous vulnerability scanning.

99.9% uptime SLA

Enterprise customers receive a 99.9% uptime guarantee backed by service credits, on a multi-region architecture built for high availability.

Guardrails for every vertical

Each industry pack ships with a hard safety boundary, enforced in the agent itself, not left to a prompt.

Healthcare

Emergency guard

The healthcare agent detects urgent symptoms and transfers to on-call staff or emergency services. It is an administrative assistant only and never gives clinical advice.

Restaurant

Allergen guard

The restaurant agent answers allergen questions from your verified menu data only. It never guesses on ingredients and flags anything it cannot confirm for a human to review.

Real Estate

Fair-housing guard

The real estate agent enforces fair-housing rules in code. It describes properties by objective features only and never steers based on any protected class.

Talk to our security team

Questions about compliance, data handling, or custom security requirements? Our team is ready to help.