US or EU, your choice
Growth and Scale workspaces can pin all processing and storage to the US or the EU. Sub-processors are listed and contractually bound.
Home / Platform / Security & Compliance
Enterprise Security, Small-Business Simple
Encrypted recordings, consent prompts, regional data residency and a HIPAA Business Associate Agreement — without a six-month procurement cycle.
Security
Your calls stay yours.
We never use customer recordings or transcripts to train shared models. You decide how long data is kept, where it lives and who can see it.
- Encryption everywhere — TLS 1.2+ in transit, AES-256 at rest. Recordings and transcripts are encrypted per workspace.
- Compliance programs — SOC 2 Type II controls, HIPAA BAA on Scale, GDPR-ready DPA, configurable call-recording consent for every US state and EU country.
- Access & audit — SSO (SAML / Google), role-based access, full audit log of who listened to what, and one-click export or deletion.
live call · consent prompt enabled
Everything security & compliance needs
0 days to 7 years
Set retention per workspace. Choose transcript-only mode to never store audio at all.
HIPAA-ready by design
Consent prompts, minimum-necessary summaries, PHI redaction in alerts and a signed BAA for Scale customers.
PCI-safe hand-off
The agent never hears card numbers: callers are transferred to a secure IVR or sent a payment link.
Common questions
No. Your data is used only to run your agent. Model improvements use licensed and synthetic data.
Only users you grant the 'recordings' role. Every playback and export is logged.
Yes. The consent prompt supports 'press 1 to continue without recording' and transcript-only modes.
Need a security review?
Request our SOC 2 report, DPA and HIPAA BAA templates.