Tenant isolation
Customer access is scoped to the active organization and membership in database queries—not only in browser navigation.
Security & recording
The phone used to reach a salesperson and the identity shown to a recipient are protected separately.
Authentication, organization ownership, callback phone, displayed caller ID, signed provider events, recording access, and billing evidence are verified as independent boundaries.
Approved identity only
Unavailable or rejected displayed caller ID fails clearly. The platform never substitutes the private callback phone.
Salesperson-first calling
The intended recipient is not called until the salesperson accepts or the documented three-second hands-free condition completes.
No blind paid retry
An ambiguous provider submission becomes an unknown hold and is reconciled instead of being called again automatically.
Optional silent recording
Silent recording is off by default, starts only after recipient answer, and adds no service-generated announcement, beep, confirmation, or keypress.
Typed account attestation
Recording remains disabled until the individual owner or authorized business representative accepts the exact responsibility evidence.