Safety, built in
Treat the phone like production.
Headers, cookies, and isolation are not a brochure. We describe what we actually ship.
Controls on the box
Workspace isolation
Every call, employee, number, and document is scoped to one tenant.
Role-based access
Owners, operators, and viewers see only the floor they were invited to.
Encrypted secrets
Provider keys stay server-side. They never ship to the client.
Hashed API keys
Live keys are shown once, then stored as a hash.
Signed webhooks
Inbound telephony events are verified before they can move a call.
Rate limits
Auth and telephony hooks have separate buckets.
Audit trail
Transfers, knowledge edits, and billing changes leave a record.
Cookie restraint
Session cookies are first-party. Optional analytics stay off until you opt in.
What we will not write
This page does not list SOC 2 or ISO as trophies. When VoiceDesk earns one, it will appear here with a date.
Privacy policy