Home / Security
Security and data, in plain words
No badges, no acronyms first. What happens to your data, where, for how long, and how to make it stop.
Where your data lives
In your systems. The AI reads and writes there through official connections. We do not copy your mailbox, calendar or books into a database of ours.
What we store
The log of actions, call transcripts and recordings, and the knowledge document you own. Encrypted at rest and in transit, on servers we operate for you, in the United States.
Who can see it
You, the people you name, and our engineers during the build and the monthly session, under a signed confidentiality agreement. Access is logged.
How long it is kept
For the retention period you set, then deleted. When the service ends, everything is exported to you and deleted within seven days, with written confirmation.
AI model providers
Calls, messages and documents are processed by model providers under contracts that forbid training on your data. For healthcare, only providers that sign a Business Associate Agreement.
Phone and text
Calls forward from your number, nothing is ported. Texts go from your registered business number. Recording disclosure is given where the law requires it.
Money
The AI never moves money. It prepares invoices, quotes and payment links for your approval. It never reads a card number aloud or by chat.
Spend
Every paid service has a hard daily cap you set. When reached, the service stops until midnight and you are told why.
Disclosure to callers
The AI introduces itself as your office assistant. If asked, it says it is an AI assistant and offers a person.
Deleting
One written request. Logs, transcripts, recordings and the knowledge document are deleted within seven days and you receive confirmation.
Reporting a problem
Security issues go to the contact page under Legal notice and are answered by a person within one business day.
Related: HIPAA and an AI on the phone, daily spend caps, privacy policy.