Minimized identity data
Email, phone, destination, names, and signatures are encrypted. Separate keyed blind indexes support exact lookup without plaintext.
Prelaunch policy draft
Privacy is enforced in storage and access paths.
This preview describes the implemented privacy boundary; final legal text, retention periods, and launch entity details remain subject to owner and legal approval.
Organization ownership
Business call history and recordings belong to the business account, not to an employee who later leaves.
Private recordings
Provider media URLs are never customer data fields. Playback and download require a fresh ownership and permission check.
Retention
Call, recording, audit, billing, and deletion retention are separate. Final launch periods remain an explicit open decision.