Telephos’s Trust CenterContact securityTelephos is an AI-powered platform that processes call recordings, transcripts, and team communications like Slack messages to deliver actionable business insights and optimize workflows. Security is core to everything we build. Our SOC 2 audit is complete, covering Security, Availability, and Confidentiality with encryption at rest and in transit, role-based access control, continuous vulnerability monitoring, and rigorous vendor management.
Telephos uses Anthropic's API (Claude) for portions of analysis (call transcript reasoning and complex business-insight extraction). Per Anthropic's standard API terms, content submitted via the API is not used to train Anthropic's models. Excerpts of transcript text and derived prompts are sent; no PII beyond what appears in call content. Processed in US regions. Learn more at anthropic.com.
Telephos uses OpenAI's API for portions of analysis (transcript classification and summarization). Per OpenAI's standard API terms, content submitted via the API is not used to train OpenAI's models. Excerpts of transcript text and derived prompts are sent; no PII beyond what appears in call content. Processed in US regions. Learn more at openai.com.
Managed application hosting and PostgreSQL database infrastructure. Processes call transcript text, customer account metadata, user identifiers, and integration tokens. Data resides in Render-managed infrastructure in the United States. Selected for SOC 2 Type II audited controls, managed Postgres with at-rest encryption, and private networking between services. Learn more at render.com.
Hosts Telephos's frontend web applications (marketing site, customer web app). Processes in-flight web requests including authenticated session data. No persistent storage of customer data on Vercel; persistent data resides in Render-managed infrastructure. Processed in US regions.
Hosts Telephos's email, calendar, and shared drive infrastructure. Customer correspondence (e.g., support inquiries, contract communications) flows through Workspace email. Internal documents may include limited customer metadata. Selected for Google's SOC 2 / ISO 27001 attestation, MDM-managed accounts with mandatory MFA, and admin-console-controlled access. Learn more at workspace.google.com.
Customer relationship management (CRM) system for Telephos sales and customer success. Stores prospect and customer contact data (names, business email addresses, deal stage, communication history) and Telephos-internal pipeline metadata. No customer end-user data of substantial sensitivity is stored in HubSpot. Selected for HubSpot's SOC 2 Type II attestation. Learn more at hubspot.com.
Telephos uses Perplexity AI's API for web-search-grounded research of accounts and contacts during call preparation and account intelligence workflows. Search queries may include customer-derived data (company names, contact names, domain identifiers). Per Perplexity's API terms, content submitted is not used to train their models. Processed in US regions.
Internal team communication and customer-facing shared channels (Slack Connect). Shared channels with customers may carry customer messages and integration notifications. Internal Telephos workspace stores team discussions and operational alerts. Selected for Slack's SOC 2 Type II attestation under Salesforce Trust. Learn more at slack.com.
Payment processing for Telephos customer billing. Stores customer billing identifiers (company name, billing email, payment method tokens). Telephos does not directly handle credit card numbers; PCI-relevant data resides exclusively with Stripe. Selected for Stripe's PCI DSS Level 1 and SOC 1 / SOC 2 attestations. Learn more at stripe.com.
Hosts video meetings between Telephos and customers. Meeting recordings (where applicable) are retained per the meeting host's configuration and contain customer-facing audio and video content. Selected for Zoom's SOC 2 Type II attestation, encrypted-at-rest recording storage, and admin-controlled retention policies. Learn more at zoom.com.