Security & Compliance
Security You Can Show Your Customers
HIPAA Ready controls, SOC 2 Type II, strong encryption, and a choice of where your data lives.
30-day partner trial. No card needed.
HIPAA Ready
On HIPAA-enabled plans, HIPAA mode limits AI Agents to approved providers, keeps notification emails free of health details, audits access to protected health information, and turns off public recording links. Talk to us about your HIPAA requirements.
SOC 2 Type II
Calldacity is SOC 2 Type II. Ask us for details as part of your security review.
Data Residency
Choose US or Australian (Sydney) hosting. Additional regions can be deployed on request.
Encryption
Encrypted At Rest And In Transit
- AES-256 encryption at rest for databases, caches and stored recordings, transcripts and knowledge bases
- TLS 1.2 or higher in transit, with HTTP Strict Transport Security
- API keys and integration credentials encrypted before they are stored
- Each fax encrypted with its own unique key
Data Residency
Choose Where Core Data Lives
Australian customers can run on infrastructure in Sydney for core customer data, including databases, recordings and knowledge bases. We build other regions as needed.
Regional processing depends on the AI speech and language providers selected for each agent. Some platform services, such as sign-in and service monitoring, run in the US.
Controls
Safety And Access Controls
Guardrails
Optional screening for harmful content, profanity, prompt attacks, personal information and denied topics such as medical, legal or financial advice.
Spam Protection
Repeat-caller limits on by default, with allow lists.
Transfer Controls
Administrators decide whether and where an AI Agent may transfer calls.
Recordings & Audit
Call recordings, transcripts and audit logs for review.
Single Sign-On
Sign in with Google, Microsoft or Apple, configured per tenant.
Talk To Us About Compliance
Book a demo to review security, residency and HIPAA Ready configuration for your customers.