Answering Machine: Security Overview

Answering Machine encrypts data in transit with TLS and encrypts stored credentials and tokens at rest with AES-256-GCM. Workspace isolation is enforced in the application layer and covered by automated tests. Database-level row-level security policies are applied and tested, but are not yet enforcing in production because the runtime role cutover is still pending. Retention is configurable per workspace, administrative actions are audit-logged, and customer content is never used to train AI models.

We align our security and privacy controls to SOC 2 and HIPAA standards as an internal benchmark. We have not completed formal SOC 2 or HIPAA audits and do not claim certification, and we do not currently offer Business Associate Agreements. Please do not submit protected health information.

Home · Privacy Policy · Terms of Service