Stated plainly, not oversold.
If your business handles regulated data — healthcare, legal, financial — read this page carefully before signing up, and reach out with any questions before onboarding.
Encryption in transit
Calls are processed through infrastructure providers (Vapi, Twilio) that encrypt data in transit using industry-standard TLS.
Data retention
Call recordings and transcripts are retained only as long as needed to operate your dashboard. You can request deletion at any time.
Formal certifications — honestly, not yet
We are not currently HIPAA compliant or SOC 2 certified. These are on our infrastructure roadmap as we grow, not claimed before they're formally earned and audited.
How we handle your calls and your customers' data.
Calls handled with care
Call data is used only to operate your receptionist and is never sold or shared with third parties for marketing.
You control your data
You can request a copy of your call logs or have your data deleted at any time.
Compliance, done properly
For regulated industries like healthcare and legal, formal certifications (HIPAA, SOC 2) are pursued as part of our infrastructure roadmap — not claimed before they're earned. Practices requiring signed compliance documentation should confirm current status with us directly before onboarding.
Handling patient, client, or financial data and need specifics on how we'd handle yours? Ask us directly before onboarding — we'd rather answer honestly upfront than have you find a gap later.