Security and privacy
How we handle your calls and your data.
Each business's data is kept separate and hosted in the United States, sensitive actions are logged, recordings aren't public links, and we don't claim certifications we don't hold.
Hosted on AWS in the US
Frontal Voice runs on Amazon Web Services in the US East (N. Virginia) region: our servers, database, encrypted file storage and encrypted backups. AWS has signed a Business Associate Agreement (BAA) with Frontal Web.
How calls are processed
Our voice provider handles call audio, speech recognition, the AI conversation and recordings, and has signed a BAA with Frontal Web. Some of the AI model and speech providers it works with may process call data outside the United States under written agreements. The privacy notice names our providers.
Your data stays yours
Every request is scoped to your business in the API and service layers, and automated tests try to read and write across businesses to prove they can't.
Changes leave a trail
Publishing, billing changes, exports, support access to your account and event replays create audit records that can't be edited.
Recordings aren't public links
Recordings play through signed or proxied access. The voice provider's recording links are never shown directly.
Incoming events are verified
Provider events are checked for signature, timestamp and replays, processed once, and retried or set aside for review if they fail.
Call history expires
Recordings, transcripts and call records are kept for up to your plan's retention period, shown in Billing, then deleted automatically, including the copies our voice provider stores. Choosing a shorter period, or moving to a plan with a shorter one, permanently deletes calls older than the new period. You can export call records before then.
It never claims to be human
You choose the disclosure wording and when it's given: at the start of every call, or when a caller asks, where your rules allow. Either way it answers honestly when asked. A recording notice is added when you record.
Frontal Voice does not claim HIPAA compliance, SOC 2 or any other regulatory certification. You decide disclosure and consent for your jurisdiction. Healthcare businesses can review and sign a Business Associate Agreement (BAA) with Frontal Web in the app, under Settings. Features that handle patient information stay off until the BAA is signed and we approve the account.