Trust center
How we handle your data.
What SiteCall does with your calls, texts and recordings, stated plainly. Each statement here describes something that is live today.
How workspaces are kept apart
Each workspace's data is kept apart by row-level security in the database, so a query that forgets a workspace filter returns nothing instead of another business's records.
Inside a workspace, people see the numbers assigned to them and the calls they handled, supervisors see what they oversee, and owners and admins see everything. A workspace can limit recordings and transcripts to supervisors and above.
How long data is kept
The trace of a call (the steps it took, ring attempts and push notifications) is kept for 400 days.
Who can see it, and the record of it
Support access to a managed workspace's recordings, transcripts or message text needs a grant with a stated reason that lasts at most 24 hours. The grant, each use of it and its end are recorded in that workspace's audit log.
What we measure and publish
We run automated checks on our components every five minutes and publish the last 90 days of results, with any incident, on our status page.
Requests and subprocessors
The companies that process customer data for SiteCall are listed publicly, with what each does and the date the list was last reviewed.
More detail
Security covers encryption, payments, access and what we don't claim. System status shows measured health and incidents. Subprocessors lists who handles customer data.