Security and GDPR
Built for the rules European businesses live by.
Each business sees only its own data, and the agent does only what you allow.
One request, followed from the caller to your calendar.
Nothing reaches your systems without passing the tool gateway.
- 01
Your customer
Is told at once that they speak to an AI.
- 02
Voice gateway
Speech to text and back. [Hosting region, e.g. EU data centres].
- 03
VOXORA agent
Answers from your documents; keeps no customer data of its own.
- 04
Tool gateway
Checks every action against the tools you allowed.
- 05
Your systems
Calendar, Outlook and documents, via your own connection.
Each business’s data is separated in the database itself, not only in the application.
What the platform enforces.
- 01
Every business sees only its own data
Row-level security in every database.
- 02
The agent says it is an AI
A greeting without the AI disclosure cannot be published, as the EU AI Act requires.
- 03
Opt-outs are respected
No reminders after an opt-out; every blocked message is recorded.
- 04
Automatic messages are off until you turn them on
One switch per business, and one platform-wide, stop them all.
- 05
Access ends within a minute
Removed colleagues lose access everywhere within 60 seconds.
- 06
Memory can always be erased
What it remembers about a contact can be exported and erased.
What we will put in writing.
- 01
Languages
Speaks your customers’ languages: [list of supported languages].
- 02
Where data lives
[Hosting region and provider, e.g. EU data centres].
- 03
GDPR
[Data processing agreement, retention period and deletion policy].
- 04
Always a human option
[How a caller reaches a person, and when the agent hands over].
Questions from your data protection officer?
Bring them to a walkthrough; we go through the data flow with you.


