What we actually do to protect your call data, and what we do not claim.
All data transmitted over HTTPS/TLS 1.3. No plain-text communication ever leaves or enters our servers.
Owner, Admin, and Staff roles with scoped permissions. Sensitive routes (billing, security, exports) restricted to account owner only.
Every login, logout, settings change, data export, and security event is logged with IP address and timestamp. Viewable in your Security dashboard.
All form submissions protected with CSRF tokens. No cross-site request forgery possible. Standard Laravel security stack.
Each business's data is kept separate from every other business, so one business can never see another's customers or calls.
Standard browser security protections are switched on across the whole site, including forced HTTPS.
Account owners can export all their customer, appointment, and call log data at any time in CSV format. Full data portability.
AI responses are generated with guardrails against harmful content. No medical, legal, or financial advice without disclaimers.
Every AI call is wrapped in a failover service. If our AI provider is down, KaiVox delivers a graceful response — no dead silence for your callers.
The Indian rules we are built around. We hold no security certification yet — when we do, it will be named here with its certificate number.
We have a responsible disclosure policy. Report security issues privately and we will respond within 48 hours.
Report it through our contact form