Security

Your callers’ voices, kept like they matter.

A recording is a person saying their name, their budget and what they are looking for. Everything here is built around that.

RecordingRohan Shah · sample
Kept in
Private storage, your workspace
Plays through
A link that expires
Heard by
Your team, signed in

Each client’s data is kept apart.

Every lead, call, recording and document belongs to one workspace, and every query is scoped to it. Isolation between two workspaces is tested on every change.

Recordings are private.

Call recordings are copied off the carrier into private storage, filed by workspace, and played back through links that expire. There is no public URL to guess.

Credentials are encrypted at rest.

API keys a client gives us are encrypted with AES-256-GCM using a key held only in the server environment.

Sign-in you already trust.

People sign in with Google or with email, and each person sees only their own company’s workspace.

Encrypted in transit.

The dashboard and its API are served only over HTTPS, with strict transport security and headers that stop the dashboard being framed by another site.

Where data lives

Hosting.

Where each part of the service is hosted
Part of the serviceWhere it runs
Dashboard, API and databaseSingapore (Railway, asia-southeast1)
Call handlingKuala Lumpur, Malaysia (virtual private server)

Sub-processors

Who else touches the data, and why.

Sub-processors and what each one does
CompanyWhat for
RailwayApplication and database hosting
HostingerHosting for this website, and the virtual server that handles live calls
Google (Gemini)Speech understanding and the agent’s voice
SupabaseSign-in and private storage of call recordings
VoiceLinkIndian telephony: numbers, SIP trunking and carrier recordings
NXCWhatsApp brochure delivery (WhatsApp Business Platform)
MetaLead Ads, for clients who connect them
ResendTransactional email
CloudflareBot protection on the website’s enquiry form

Security questions or a vulnerability to report? Use the enquiry form and describe it in the last question, “Anything else we should know?”.

Your phone, answered.In their language.

Tell us how your leads arrive today. We will show you the agent that answers and calls them.