This page is for the person who needs to know exactly how this works before they hand us their business line. Read it top to bottom in 90 seconds.
AES-256 at rest. TLS 1.3 in transit. Per-tenant encryption keys on the Pro roadmap (Q4).
Role-based access inside your account (Pro). SSO/SAML on Pro Enterprise add-on.
Telnyx, a US-based carrier. STIR/SHAKEN supported on outbound calls for caller-ID integrity. No outbound spam dialing — Acceptable Use policy enforced.
Adding a processor requires updating this list before they touch your data.
| Processor | Handles | Location |
|---|---|---|
| Telnyx | Telephony — call audio in flight | USA |
| ElevenLabs | TTS — agent voice generation only (never speaker-ID) | USA |
| OpenAI | Speech-to-text (Whisper) — transcripts only | USA |
| Anthropic | LLM for agent responses | USA |
| Clerk | Authentication — your login + session | USA |
| Supabase | Database — your account + transcripts at rest | USA |
| Render | Application hosting | USA (Oregon) |
| Stripe | Subscription billing (no call audio) | USA |
“Hi, you've reached the office — I'm an AI assistant. How can I help?”
The greeting is fully customizable in onboarding. You can rewrite every word. The one thing we don’t let you do: have your agent lie about being a person if a caller asks. That’s the floor; the rest of the greeting is yours.
For outbound calls in California (and other all-party-consent states like Illinois, Florida, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania, Washington), we recommend a greeting that opens with both the AI identification and the recording notice. The default greeting template we ship does this.
Download all your transcripts as JSON or CSV any time.
Purge a single call, a date range, or your entire account. Deletes propagate across our systems within 30 days; downstream processor deletion follows their published SLAs.
Set per-account or per-call retention windows. Defaults are 7/30/unlimited days by tier.
When you turn this on, the caller hears "this call won’t be recorded" before they speak.
Send security reports to security@callmyagent.ai. We aim to acknowledge within 2 business days. We don’t run a paid bug bounty, but we won’t pursue legal action against researchers who follow responsible disclosure: give us 90 days before public disclosure, no DDoS, no social engineering, and no data exfiltration beyond proof-of-concept.
30 free trial minutes. No credit card required.