Security & Data

• Our systems and records: our cloud provider in Sydney.
• Our AI model: hosted with our cloud provider in Australian regions.
• Call routing: our phone provider's Australian region.
• Speech recognition and voice: specialist providers, listed by service and location in our Privacy Policy.
• Email: our email-sending service in Sydney, and our email and office software.
• Workflow automation: self-hosted with our cloud provider in Sydney.

• Data at rest is encrypted with our cloud provider's key management service. Website and API traffic is encrypted with TLS.
• Client data can't be deleted by an ordinary admin account, only through a separate emergency role that raises an alarm when used.
• An audit archive that can't be altered or deleted for 7 years.
• Our voice API credential works only from the agent's own server.
• Agent logs withhold phone numbers, email addresses and callers' words. Masking on one client agent is still being verified.
• A tested process for access, correction and deletion requests.
• Failures raise alarms, sent to a monitored inbox.

• Give clinical, legal or financial advice.
• Discuss anyone's account, policy or claim on the strength of a phone number.
• Carry on when they can't help. They hand over to a person.

Tested on our agents; one client agent's tests are still in progress.

We hold no security certifications. Evidence of the controls on this page is available on request: email info@evolaition.ai.