Trust & Security
What happens to a call, who can see it and how long it is kept.
Where a call goes
- CallerCalls your usual number
- TelephonySelectedYour carrier forwards the call; Telnyx for test and outbound lines
- AI processingTo be confirmedMistral AI: speech-to-text, language model, voice. Processing region to be confirmed per API
- Request storagePlannedTranscripts, summaries and requests in an EU-hosted database (Scaleway or OVHcloud)
- Your teamEmail notification and the console, for authorized users only
Principles
- AI disclosure
- Every call opens by saying it’s an AI assistant.
- Minimal data
- The assistant collects what the request needs, nothing more.
- Audio off by default
- Transcripts and summaries only. Retention is set per customer.
- Separate accounts
- Row-level security in the database, tested automatically.
- Your controls
- Opt-outs, approvals, transfer rules and a stop button for outbound calls.
- No training on your calls
- Not without your written agreement.
Provider, region, telephony, logs, storage
Each layer separately. Final providers, locations and contracts are shared before any pilot.
| Layer | Provider / location | Status |
|---|---|---|
| Model provider | Mistral AI (France) | Selected |
| Processing region | EU expected; confirmed per API before any pilot | To be confirmed |
| Telephony | Your carrier (inbound); Telnyx (test and outbound lines), route-dependent | Selected |
| Application hosting & storage | Scaleway or OVHcloud, EU region | Planned |
| Technical logs | Same EU hosting, no call content, short retention | Planned |
| Email delivery | Transactional email provider | To be confirmed |
GDPR and UK GDPR data processing agreements available. No security certification yet.
Retention and deletion
| Data | What happens | Fixed or contractual |
|---|---|---|
| Audio recordings | Not recorded by default | Fixed |
| Transcripts and summaries | Kept for request follow-up, then deleted | Duration set in your contract |
| Requests (callbacks, incidents) | Kept while the account is active | Duration set in your contract |
| Opt-outs | Kept permanently so the person is never contacted again | Fixed |
| Deletion on request | Per contact or for the whole account, with confirmation | Procedure in the DPA |
Documents
- Privacy policy
- Legal notice
- Data processing agreement (DPA): available on request
- Subprocessor list: shared before any pilot
Last updated: 18 October 2026.
Questions about data?
We’ll walk you through the data flow for your setup before any pilot.