Trust Center
Enterprise-grade security, privacy, and compliance at the core of our Voice AI platform
Security First Architecture
Our voice AI platform is built on comprehensive security measures, designed to protect user data and safeguard system integrity throughout the call and interaction lifecycle.
End-to-end encryption (TLS 1.2+, AES-GCM)
Scoped data exposure - no persistent memory
Zero Trust Architecture
Direct internal SIP trunking
Compliance Certifications
We maintain the highest industry standards and regularly undergo rigorous third-party audits to ensure compliance.
ISO 27001:2022
Certified Information Security Management System ensuring systematic approach to managing sensitive company and customer information.
Current: June 2025
Security Assessments
- Access logging and monitoring
- Password management
- Multi-factor authentication
- Role-Based Access Control (RBAC)
Legal Framework
- Data Processing Agreement (DPA)
- Master Services Agreement (MSA)
- Cyber Insurance Certificate
- Australian Privacy Act compliance
Security Control
AI Trust & Safety
- Artificial Intelligence Systems
- Content filtering and guardrails
- Responsible AI practices
Access Control
- Access logging and monitoring
- Password management
- Multi-factor authentication
- Role-Based Access Control (RBAC)
Network Security
- Zero Trust Architecture
- Firewall & network security
- VPN & Private Cloud Control
- Anti-DDoS protection
Data Protection
- Encryption in transit and at rest
- Automated backups
- Data classification policies
- Secure data disposal
Application Security
- Static code analysis
- Vulnerability management
- Secure development lifecycle
- Regular patch management
Monitoring Response
- 24/7 security monitoring
- Incident response program
- Threat detection and response
- Security event logging
Data Flow & Storage
Transparent data handling with appropriate security controls at every stage of the lifecycle.
Real-time Processing
Transcription data and session metadata are processed and stored in Google Firebase with enterprise-grade security controls.
Post-Call Processing
Data flows back to Firebase after interacting with authorised third-party systems, maintaining audit trails throughout.
Long-term
Storage
Call recordings are securely archived in Amazon S3 and Cloudflare R2 with encryption and access controls.
Combining trusted systems and comprehensive solutions.