Modern by design. Secure by default.
Your customers trust you with their calls. The platform behind your agent is built to be modern, scalable and careful with their data, so that trust holds.
A modern platform, built to scale.
No legacy stack. Every layer was built for real-time voice, and built to grow with you.
- Serverless on a global edge
Your portal and its APIs are served from a worldwide edge network and scale without servers to manage.
- Built for real-time voice
Your agent runs on a global real-time media network. Each call runs in its own isolated process, with voice-activity detection and noise cancellation.
- Our own SIP edge
Built for carrier-grade uptime: stateless nodes across availability zones behind fixed IPs, TLS on every connection, certificates renewed automatically. Any node serves any call.
- Signed, short-lived call setup
Every call hand-off is cryptographically signed and expires in minutes. A captured request cannot be replayed.
- Multi-tenant by design
Every request is checked for workspace membership. Each partner gets its own domain, branding, email sender, billing account and API key.
- Infrastructure as code
Every cloud resource is defined in code and deployed the same way across development, staging and production.
How we protect your customers’ data.
Their credentials, their calls and their callers’ details, handled with care at every step.
- Credentials encrypted at rest
The CRM, accounting, commerce, calendar and SMS credentials your customers connect are encrypted at rest with AES-256.
- Callers verified first
Before the agent shares account details, the caller is verified. Unverified callers hear masked hints only, and the agent cannot override it.
- Recording links expire
Links to call recordings are signed and expire after one hour. Every open mints a fresh link, so a copied link goes stale.
- Private by default
Error reports carry no personal data by default. Caller numbers are redacted in traces, and the CRM integration turns tracing off entirely.
- Nothing stored, if you choose
Switch on the no-storage option and the agent’s calls leave no call records or recordings behind.
- Role-based access
Each workspace has owner, admin and member roles. Your customers decide who sees what.
Weekly releases, tested in isolation.
A platform your name is on should get better every week, without surprises.
Weekly releases
New features and fixes ship every week.
Tested on its own database copy
Every change is tested against its own isolated copy of the database before it merges. Production data is never touched.
Secrets stay managed
Keys and secrets are stored as managed secrets and handed to each service as protected variables.
Monitored end to end
Error tracking runs across the portal, the API, the voice agent and the SIP edge. A failed call raises an alert.
Our hosting, database, cloud, real-time voice and calling providers are independently audited to SOC 2 Type II, and most also to ISO 27001.
Every public endpoint uses TLS, and so does every connection to our SIP edge.
Your customers’ calls, recordings and records are stored in the US.
Runs on
Questions about security.
Yes. Every request is checked for workspace membership before any data is read. Each partner has its own domain, branding, email sender, billing account and API key.
In the US.
They are encrypted at rest with AES-256. Your customers connect a tool once from their portal, and the agent uses it from there.
No. The caller is verified first. An unverified caller hears masked hints only, such as the last digits of an account, and the agent cannot mark a caller as verified.
Yes. With the no-storage option on, the agent’s calls leave no call records or recordings behind.
People signed in to the customer’s portal. Each recording link is signed and expires after one hour, so a copied link stops working.
Yes. Outbound webhooks carry a signature you can verify, retry up to five times with backoff, and keep a delivery log.
Yes. Our SIP edge calls from fixed addresses, so your PBX can allow-list them and refuse everything else.
Email security@voxtell.ai. We read every report.
