Workspace access and credentials
Tenant-owned records are scoped to an organization. Role-based permissions protect sensitive actions, and two-factor authentication is available for user accounts. Provider and integration secrets are encrypted before storage and are not returned in ordinary settings responses.
Calling consent and suppression
Live outbound workflows check consent, do-not-call entries, calling windows, budget and capacity. Mid-call opt-out handling and verified provider opt-out outcomes suppress future calls. Agents disclose that they are AI; the product does not provide caller-ID spoofing or ways around suppression.
Recordings and retention
Recording requires explicit configuration and the required consent. Stored audio is private, with short-lived signed access links and audit records. Workspace retention settings and contact privacy tools support data export and deletion. Redaction can remove supported sensitive patterns from transcripts; it is not a guarantee that every identifier will be detected.
Reviewable operations
Sensitive actions have audit entries. Webhooks are verified and deduplicated, and uncertain provider or payment outcomes are reconciled rather than blindly repeated. Configure your own legal policies and escalation process before deployment. These controls are not a claim of certification or a substitute for your organization’s compliance obligations.