Trust & Compliance Center

Everything your legal, IT and procurement teams need to approve an AI agent — in one place, in plain English.

Our commitment

We always disclose AI

Every agent says it’s an AI at the start of each call or chat and offers a person.

Consent before AI calls

Outbound AI calls only to people who have given the consent the law requires, with consent logs and instant opt-out.

Your data stays yours

Processed only to deliver your service, under a DPA; not used to train AI models; deleted on your schedule or at contract end.

People make the big decisions

Our agents don’t make decisions with legal or similarly significant effects — tenant approvals, hiring, credit, legal advice. They collect information and hand it to your team.

Security by design

Encryption, least-privilege access, logging, vendor due diligence — from the team behind Infirise Technologies’ managed IT and cyber-security services.

Security

Rules we design for

Region	Rules we design for
EU	GDPR (DPA with Standard Contractual Clauses; transfer impact assessment) · EU AI Act Article 50 transparency (from 2 August 2026, unchanged by the 2026 Digital Omnibus) and Article 4 AI literacy (since 2 February 2025) · workplace ban on emotion recognition (Article 5) · ePrivacy rules for cookies and marketing
UK	UK GDPR and the Data Protection Act 2018 (DPA with the UK Addendum) · PECR for marketing calls, texts and cookies · ICO guidance on AI
US	TCPA and FCC 24-17 (AI voices are “artificial”) · state bot-disclosure laws (e.g., California SB 1001, Utah, Maine) · state privacy laws, including California’s CCPA and its automated-decision rules from 1 January 2027 · Colorado SB 26-189 from 1 January 2027 · recording-consent laws
Canada	PIPEDA · Québec Law 25 (including notice of automated decisions) · CRTC Unsolicited Telecommunications Rules (consultation 2026-132 on AI voices under way) · CASL for commercial electronic messages
Industry	Fair Housing Act (real estate and property) · FTC Safeguards Rule and IRC §7216 (tax and accounting) · ABA Formal Opinion 512 (law firms) · PCI DSS (payments — no card numbers by voice)

Data protection

Roles: we are your processor for client data and the controller for our own website and demos.
Data locations: Cloud & On-Premise Hosting Options Available.
Default retention: recordings 90 days, transcripts 12 months, adjustable.
We support your data-subject requests within 5 business days.

Responsible AI

Pre-launch testing with real question sets
Human oversight and escalation paths
Scripts reviewed for bias and fair treatment
Topics the agents won’t advise on (legal, medical, tax, financial)
Incident process for harmful or wrong answers