Security & privacy
A call can't be undone.
That's why the important rules are enforced in code and by the phone carrier, not left to the model.
Approval first
Preparing a call and starting it are separate steps, and starting needs an explicit flag. Starting twice never dials twice.
Always discloses
Every call opens by saying it's an AI. A brief can't turn this off.
No recordings
Audio exists only in memory while the call runs. Transcripts are deleted after 7 days.
Hard limits
The carrier enforces a maximum call length. Premium and service numbers are blocked.
Scoped tokens
Each token can only see and control its own calls.
Hosted in the EU
Servers are in Frankfurt. Carrier webhooks are verified by signature.
Service providers
| Provider | Role | Data |
|---|---|---|
| Google Cloud | Hosting (Frankfurt) | Stored account and call data |
| Sign-in | Name, email, profile picture | |
| Twilio | Telephony | Phone numbers, call audio in transit |
| OpenAI | Voice model, call review | Call audio in real time, transcripts |
Full details: Datenschutzerklärung. To report a security issue, write to the address in the Impressum.