Security - lisa Security - lisa
Get Started
Security overview

Every call protected, start to finish.

Lisa hears your customers' names, addresses and job details. We treat that like the sensitive information it is, with encryption, tight access and clear limits on how data is used.

Last reviewed October 13, 2026

Protection at a glanceWhat is on by default
Data in transit TLS encrypted
Data at rest AES-256
Staff access Least privilege + MFA
Caller data sold Never
Used to train public AI Never

Six layers working together

Security is not one feature. It is how the whole system is built and run.

Encryption everywhere

Traffic is protected with TLS. Recordings, transcripts and databases are encrypted at rest, with keys managed separately from the data.

Strict access control

Only people who need to see conversation data can. Staff access is role-based, requires MFA and is logged for review.

Hardened infrastructure

We run on reputable cloud providers with network isolation, patching, and separated production and test environments.

Monitoring & response

We watch for unusual activity, alert on suspicious access and follow a written incident response plan with customer notification.

Safe AI behavior

Lisa has guardrails, stays within your business scripts, tells callers she is an AI, and hands off to a person when she should.

Backups & resilience

Automated encrypted backups and tested recovery help your phones keep working when something fails.

Follow a call through the system

Here is what happens to a customer's information from first ring to final deletion.

Call arrives

Caller hears an AI and recording notice where required.

Encrypted transport

Audio travels over secured, encrypted connections.

Processed by Lisa

Speech is understood, the lead is qualified, a job is booked.

Stored securely

Encrypted at rest, visible only to your account.

Deleted on schedule

Removed after your retention period or when you ask.

Where we stand today

An honest status of our security controls. If something is still in progress, we say so.

Encryption in transit (TLS 1.2+) All calls, texts, dashboard and API traffic In place
Encryption at rest (AES-256) Recordings, transcripts and databases In place
Role-based access control Least-privilege access for staff and customers In place
Multi-factor authentication Available for customer accounts, required for staff In place
Audit logging Access to conversation data is logged In place
Automated backups Encrypted, tested restores In place
Third-party penetration test Annual external test, report on request once complete In progress
SOC 2 Type II Planned. We will publish status here In progress

AI-specific safeguards

  • No training on your callers. Conversations are not used to train public models.
  • Scoped answers. Lisa sticks to your services, hours and pricing rules.
  • Clear disclosure. Callers are told they are speaking with an AI.
  • Human handoff. Urgent or sensitive calls can be transferred to your team.
  • No card numbers by voice. Payments are not collected over the call.

Privacy & compliance alignment

We design around the main privacy and communications rules our customers face, and give you tools to meet your own duties.

GDPRCCPA / CPRATCPA opt-outsCall-recording consentDPA on request
  • Data deletion and export on request.
  • Configurable recording and retention.
  • Details in our Privacy Policy and Terms.

Found a vulnerability? Tell us.

We welcome reports from security researchers and will respond within 3 business days. Please give us reasonable time to fix an issue before sharing it publicly.

security@liquidexim.tech

Good-faith research

  • Include details: affected URL or endpoint, steps to reproduce, and impact.
  • Stay in scope: test only your own accounts and data.
  • Do no harm: no data theft, service disruption, social engineering or spam.
  • Safe harbor: we will not pursue action against research that follows these rules.

Security questions, answered

The things customers ask us most before they connect their phone line.

Where is my data stored?

Data is stored with established cloud providers in secured data centers. If you need a specific region for your own compliance reasons, email us and we will tell you what is possible.

Who at your company can listen to my calls?

Access is limited to a small number of staff who need it for support or quality review, requires MFA, and is logged. We do not listen to calls out of curiosity.

Do you use my customers' conversations to train AI?

No. Caller conversations are not used to train public AI models or shared with data brokers or advertisers.

Can I delete recordings and transcripts?

Yes. You can choose a retention period, and you can ask us to delete specific records or your entire account data at any time.

What happens if there is a security incident?

We contain and investigate it, then notify affected customers and authorities without undue delay and as the law requires, with clear information on what happened and what to do.

Can I get a security questionnaire or DPA signed?

Yes. Email security@liquidexim.tech and we will send our security answers and a data processing agreement.

Need more detail for your team?

Send us your security questionnaire or ask anything. A real person will reply.

Contact security team Book a free demo