Security built into the platform architecture
Each organization's data is isolated. Role-based access controls who can view and change settings, CRM, and campaigns.
Multi-tenant isolation
Organization-scoped models and middleware ensure tenant A cannot read tenant B data. Platform admin routes bypass scoping only for authorized administrators.
Role-based access control
Team roles and permissions govern dashboard, CRM, campaigns, billing, and settings access within each organization.
Credential handling
Telephony and integration credentials are stored per organization. Secrets are not exposed in API responses — only non-sensitive configuration summaries.
Audit visibility
Audit logs and admin usage ledgers provide traceability for plan changes, minute credits, and call usage deductions.
Voice call security
Live call audio runs through a dedicated secure pipeline. Transcripts and recordings are stored in your organization workspace only.
For deployment-specific practices, see Privacy.