COMPLIANCE & GOVERNANCE

Deploy Voice AI without losing control.

Recording, consent, retention, redaction, access and approval are configurable controls, agreed with you before launch and designed to support your own policies and legal review.

Book a Demo Security position

Managed service

CONTROLS

What can be configured, and what it does.

Nothing here is switched on by assumption. Each control is set with you, for your deployment.

Disclosure and consent

Callers should know what they are speaking to and what is being kept.

AI disclosure: Wording that identifies the agent as an automated assistant is agreed with you and delivered at the start of the call.
Recording disclosure: Recording notification is configurable per number, per journey and per time of day.
Consent workflows: Where your policy requires an explicit consent step, the call flow captures and records it before proceeding.
Outbound-call controls: Permitted hours, suppression lists and volume limits are enforced. We do not run cold-calling campaigns.

Data handling

What is stored, for how long, and what is removed automatically.

Recording controls: Recording can be enabled, disabled or limited to defined journeys. Sensitive segments can be excluded.
Retention policies: Retention periods for recordings, transcripts and call metadata are set per account rather than assumed.
Automatic deletion: Records are removed on the schedule you configure, without a manual step.
PII detection and redaction: Transcripts can have detected personal data redacted before storage or export.
Customer-data isolation: Each customer's call data is kept separate from every other account's.
Training-data controls: Whether your conversations may be used to improve your own agent is your decision, recorded in writing.

Access and accountability

Who can see what, and what happened to it.

Access controls: Role-based access to recordings, transcripts and configuration.
Audit logs: Configuration and permission changes are recorded with who and when.
Recording-access history: Who listened to which call, and when, is retained.
Approval workflows: Changes to what the agent is permitted to do can require a named approver before taking effect.
Data export: Your recordings, transcripts and outcome data can be exported on request.
Deletion requests: Requests relating to an individual caller can be actioned across recordings, transcripts and records.

OUR POSITION

What we do not claim

Several things routinely appear as badges on Voice AI websites without evidence behind them. Until we can supply documentation, we do not display them — and you should ask any supplier who does to show you theirs.

We do not describe the service as UK GDPR or PECR compliant as an unqualified badge. Compliance depends on how you deploy it, what you record and the lawful basis you rely on.
We hold no SOC 2, ISO 27001 or PCI certification, and we do not display those logos.
We do not claim government approval or endorsement.
We do not guarantee UK data residency. Where data is processed is confirmed in writing for your specific deployment.
We do not offer a legal compliance guarantee. Your deployment should have your own legal review.

What we will do is answer a security or data-protection questionnaire truthfully, in writing, for your specific deployment. Read our full security position or our privacy notice.

Make every customer call count.

Hear how a managed VoiceNiche agent could answer, book and follow up for your business—or ask us to test the agent you already operate.

Hear the AI Book a Demo

Test Your Agent →