How VerbaCall protects your data and your callers
VerbaCall is a multichannel AI communications platform that calls, texts and emails on behalf of your business. Every conversation is encrypted, every outbound message follows TCPA and 10DLC rules, and every caller is told they are speaking with an AI. Here is how it works.
What happens to a call, from ring to deletion
One path, every time. Nothing is kept longer than you choose, and nothing leaves the system except the actions you asked for.
- Call connectsOn your number, over Twilio.
- AI is disclosedThe agent says it is an AI assistant.
- TranscribedTo run the call and log the outcome.
- Written to your CRMNotes, bookings and follow-ups.
- Kept, then deletedFor the retention period you set.
Three things we hold to on every account
Locked down by default
- Encrypted in transit and at rest. TLS on every connection. Transcripts, recordings and credentials are stored encrypted.
- Least-privilege access. Roles inside your account. Staff access is limited, logged and reviewed, with MFA on internal systems.
- US cloud hosting with backups. Application and data live in US-based infrastructure with tested restores.
Found a security issue? Write to security@verbacall.com.
Enforced by the platform, not left to each user
- TCPA and 10DLC. Registered campaigns, timestamped consent before outreach, STOP honored on every text, DNC numbers never dialed.
- HIPAA-ready. A Business Associate Agreement is available for covered entities and their business associates.
- AI disclosure and recording notice. Recording is your setting; when on, callers are told. Anyone can ask for a human and is warm-transferred.
Email goes out from accounts you connect, with your own domain authentication and an unsubscribe link on every message.
Yours, used only to run your agents
- You own it. Call data, transcripts and CRM records belong to your business. Never sold, never shared with advertisers.
- Not used to train models for other customers. Your conversations stay inside your account.
- You control retention. Set how long transcripts and recordings are kept, delete records anytime, export whenever you want.
Full account deletion is completed on request to sales@verbacall.com.
TCPA and 10DLC compliant outbound with built-in consent, opt-out and DNC handling. HIPAA-ready with a BAA available for covered entities.
VerbaCall's standing compliance statement. It reads the same in our contracts, documentation and here.- TwilioCalls, SMS and RCS
- ElevenLabsVoice synthesis
- US cloud hostingApp, storage, backups
- Your connected toolsCRM, calendar and email, only with your authorization
Need the full policy?
The complete information security policy covers encryption standards, access reviews, incident response, vendor management and business continuity. We send it to security and legal teams on request, usually within one business day.