Security & Compliance
Your data is our responsibility.
What protects your data today, stated plainly.
EU Hosting
Customer data is hosted on Microsoft Azure in Europe
Encryption
Data encrypted in transit (HTTPS/TLS) and at rest (Azure platform encryption)
Tenant Isolation
Customer data is scoped to your organization, with automated checks on every code change
Monitored
Health checks on every deploy, with automatic rollback when a check fails
How we protect your data
- Encryption in transit (HTTPS/TLS) and at rest (Microsoft Azure platform encryption)
- Data isolation per organization — your data is never mixed with others
- Retention of recordings and transcripts, and any use of call data for research and AI training, are described in our Privacy Policy
- Automated security checks on every code change: static analysis, secret scanning and dependency vulnerability scanning
- Role-based access control with audit logging
- Account and data deletion requests handled through a dedicated request page
Infrastructure
Cloud Providers
- Microsoft Azure — hosting (Europe)
- Google Cloud — Gemini AI models
Certifications
- No third-party certification is held today
- ISO 27001 — preparation under way (not certified)
Data Residency
Customer data is hosted on Microsoft Azure in Europe. AI and telephony processing is performed by our service providers (such as Microsoft, Google, Twilio and our real-time media provider), which may process data outside the EU. Customers with specific residency requirements are welcome to contact us.
Questions about security?
[email protected]