Security
How AI Caller Pro protects your calls and data
Your contacts, recordings and results stay inside your workspace. Here is how access, sharing and call data are protected — described as how the system works, not as badges.
Access control
Workspace isolation
Every campaign, contact and call record belongs to one workspace, and the server checks that on every request — not only in the interface.
Roles inside each workspace
Admins manage members and billing, editors build and run campaigns, viewers can only read results.
Hashed passwords and Google sign-in
Passwords are stored as bcrypt hashes, never in plain text; teams can sign in with Google instead.
Short-lived sessions
Access tokens expire quickly and are refreshed in the background, so a leaked token stops working on its own.
Sharing and invitations
Expiring share links
Reports shared outside your team use unguessable links that stop working after the period you choose.
Expiring invites
Invitations carry the role they grant and expire if they are not accepted.
Shared pages stay out of search
Shared reports and invitations are excluded from search engines and AI crawlers.
Calls and data
Full call provenance
Recording, transcript and evaluation stay attached to the call that produced them, for audit after the fact.
Protected concurrency
A fair per-workspace dispatcher caps simultaneous calls, so one campaign cannot starve another team’s.
Identity checks on sensitive calls
Campaigns can confirm they are speaking to the right person before discussing any details, and end politely if not.
Encrypted in transit
The app and its API are served only over HTTPS.
FAQ
Security questions
Who can see my campaigns and calls?
Only members of the workspace they belong to, within the limits of their role — plus anyone you explicitly send an expiring share link to.
Can a shared report link be found by search engines?
No. Shared reports use unguessable links, expire after the period you choose, and are excluded from search engines and AI crawlers.
Do you hold compliance certifications?
We describe how the system protects your data rather than claim certifications we do not hold. For specific requirements, contact us before you start.
Put outbound calling on autopilot
Launch your first campaign and see every call scored as it lands.