Security

What's in place today.

This page lists only controls that are live in the product now. We'll update it as that changes.

Data

Sensitive fields, such as phone numbers, encrypted at rest.
Sensitive identifiers are redacted from operational logs.
Call recordings kept 90 days by default. Custom retention is available on request.
Hosted in the United States.

Access

Single sign-on with SAML, plus directory sync for adding and removing users.
Audit logs of sign-ins, settings changes and admin actions.
Signed webhooks for sending approved reports to your systems.

Calls and reports

Callers are asked for recording consent before recording starts.
You can require callers to be on your roster. Calls that don't match are flagged for review.
Every report waits for a supervisor to approve or reject it.

Questions

Need a security questionnaire filled out, or details for your IT team? Email sales@vform.ai.