One call, start to finish
- Live audio is processed to run the call and is not kept by the media infrastructure. The stored recording lives in our own storage, inside your workspace.
- The AI providers that process call content are contractually barred from training their models on it. See Responsible AI.
Card and ID numbers
Callers sometimes read out a payment card or an ID number. Three layers stop those numbers being kept:- Agents refuse card details. Every agent is instructed never to ask for, write down or repeat a card number, expiry date or security code, and to offer a callback or a transfer so your business can take payment another way.
- Transcripts are cleaned. Card numbers, security codes, expiry dates and national ID numbers are replaced in the stored transcript, whether they were spoken as digits or as words.
- Recordings are silenced. The same moments are silenced in the stored recording. If they cannot be placed precisely, the recording is not kept at all.
Marking AI speech
- Stored recordings carry a machine-readable mark saying they contain AI-generated speech.
- Texts, WhatsApp, social messages and email written by an agent open with a line saying the message is from an AI assistant for your business.
- Spoken disclosure. You can have every agent say it is an AI at the start of a call: Settings → Workspace → Say it’s an AI. Where the law requires disclosure, you must keep it on. See Responsible AI.
Your copy of your data
A workspace owner or admin can export the whole workspace in open formats, including calls, transcripts, recordings, contacts, knowledge bases and agent settings, from Settings → Security → Your data → Export the whole workspace. Secrets such as API keys are left out of the export.Retention and deletion
You choose how long recordings are kept. A recording you delete in the app is removed from every copy in active storage, including older stored versions, not only hidden. Copies in encrypted backups age out within 180 days, as described below. The retention periods for each kind of data are on the Trust & Security page.When a workspace closes
When a subscription ends and the workspace closes, the data is not kept indefinitely.- Within 30 days of closing you can ask us to return your data.
- From day 60 the workspace is deleted in full from active storage: recordings, transcripts, files, contacts and the workspace itself. Our Data Processing Addendum promises deletion within 90 days.
- Copies in routine encrypted backups are removed as those backups are overwritten, on a cycle of no more than 180 days.
- Where the law requires us to keep a record, such as an invoice, we keep only that record.
Related pages
Data processing & the DPA
Our commitments as your processor, including deletion and return.
Security architecture
How the platform is protected, layer by layer.

