The agent on this site is live. Talk to it, then start free.
Security & trust center

Voice is customer data.
We treat it that way.

Everything your security review will ask, on one page: the controls, the regions, and what is not in place yet.

Saudi PDPLTLS 1.3AES-256KSA residency on request
01 · Controls & certifications

The control surface.

SOC 2 Type II
Not in place yet · planned
TLS 1.3
All data in transit
AES-256
All data at rest
Role-based access
Admin and client roles, audited actions
Audit logging
Every access to customer data
Pen testing
Annual third-party engagement
02 · Data residency

Your region. Your rules.

Platform data runs in three regions today. New regions are stood up per contract, and once yours is pinned, audio, transcripts and records stay inside it.

UKLondonLive
UAEDubaiLive
IndiaMumbaiLive
On request, on contract
United StatesSpain and Ireland (EU)Saudi ArabiaAustraliaSingaporeSouth AfricaNigeriaMexico
03 · Status

What is true today. What is not.

True today
  • Each customer's data is separated at every query.
  • Every field the agent writes into your systems is checked on our server first.
  • Every call gets a recording, a transcript, a written summary and a sentiment.
  • Encrypted in transit with TLS 1.3 and at rest with AES-256.
  • Platform data stays in the region your account is pinned to: the UK, the UAE or India today.
  • Role-based access with admin and client roles.
  • Card payments in US dollars and UAE dirhams; other currencies are charged in US dollars.
Not in place yet
  • SSO and SAML.
  • SOC 2. Planned, not certified.
  • Retention periods you set yourself. Retention is fixed by us today.
  • Self-serve signup. A person sets your line up within one working day.
  • Card billing in pounds, euros or rupees.
  • A quality score on each call. Calls get a summary and a sentiment, not a mark.

Updated as each item ships.

04 · Practices

How we operate.

Data handling

We do not train models on your customer data. Conversation content is never used for our own purposes. Retention periods are set by us today; customer-set retention is not in place yet.

Tenant isolation

Multi-tenant isolation enforced at the database layer, with per-tenant encryption keys and isolated audio pipelines.

Access

Production access is role-based, time-boxed and logged. Customer data access requires a ticketed reason.

Continuity

Multi-region autoscale, 99.9% uptime SLA, documented disaster-recovery runbooks with annual exercises.

Subprocessors

Published subprocessor list with change notifications. DPA available for every customer.

Put your security team in a room with ours.

Architecture review, DPA, subprocessor list and the SOC 2 plan, all on the table.