Skip to main content
VoiceNiche

SECURITY & GOVERNANCE

What we do, and what we will not claim.

Voice AI touches recordings of your customers talking about their problems. That deserves a straight answer about where it goes, who can hear it and how long it stays.

Ask us a security questionCompliance controls

CONTROLS

Configurable, and configured with you.

Disclosure and consent

Callers should know what they are speaking to and what is being kept.

AI disclosure
Wording that identifies the agent as an automated assistant is agreed with you and delivered at the start of the call.
Recording disclosure
Recording notification is configurable per number, per journey and per time of day.
Consent workflows
Where your policy requires an explicit consent step, the call flow captures and records it before proceeding.
Outbound-call controls
Permitted hours, suppression lists and volume limits are enforced. We do not run cold-calling campaigns.

Data handling

What is stored, for how long, and what is removed automatically.

Recording controls
Recording can be enabled, disabled or limited to defined journeys. Sensitive segments can be excluded.
Retention policies
Retention periods for recordings, transcripts and call metadata are set per account rather than assumed.
Automatic deletion
Records are removed on the schedule you configure, without a manual step.
PII detection and redaction
Transcripts can have detected personal data redacted before storage or export.
Customer-data isolation
Each customer's call data is kept separate from every other account's.
Training-data controls
Whether your conversations may be used to improve your own agent is your decision, recorded in writing.

Access and accountability

Who can see what, and what happened to it.

Access controls
Role-based access to recordings, transcripts and configuration.
Audit logs
Configuration and permission changes are recorded with who and when.
Recording-access history
Who listened to which call, and when, is retained.
Approval workflows
Changes to what the agent is permitted to do can require a named approver before taking effect.
Data export
Your recordings, transcripts and outcome data can be exported on request.
Deletion requests
Requests relating to an individual caller can be actioned across recordings, transcripts and records.

ENGINEERING PRACTICE

How the service itself is built.

  • No secrets in the browser

    Nothing that places or controls a call is exposed to client-side code. Telephony credentials and provider keys stay server-side.

  • Rate limiting on anything that dials

    Demo and call-back actions are rate-limited by number and by origin, with cooldowns and daily caps, and restricted to approved destination regions.

  • Validation on the server, not just the form

    Submissions are validated server-side. A client-side check is a convenience for the visitor, not a control.

  • Least privilege on your systems

    Integration credentials are scoped to the specific actions the agent needs. We ask for the narrowest access that makes the journey work.

OUR POSITION

What we do not claim

Several things routinely appear as badges on Voice AI websites without evidence behind them. Until we can supply documentation, we do not display them — and you should ask any supplier who does to show you theirs.

  • We do not describe the service as UK GDPR or PECR compliant as an unqualified badge. Compliance depends on how you deploy it, what you record and the lawful basis you rely on.
  • We hold no SOC 2, ISO 27001 or PCI certification, and we do not display those logos.
  • We do not claim government approval or endorsement.
  • We do not guarantee UK data residency. Where data is processed is confirmed in writing for your specific deployment.
  • We do not offer a legal compliance guarantee. Your deployment should have your own legal review.

Send us your security questionnaire

We will complete it honestly for your specific deployment, including the questions where the answer is "not yet". If a supplier's questionnaire answers all come back green, read them twice.

hello@voiceniche.co.uk

See also our privacy notice and compliance controls.

Make every customer call count.

Hear how a managed VoiceNiche agent could answer, book and follow up for your business—or ask us to test the agent you already operate.

Hear the AIBook a Demo
Test Your Agent →