Security & compliance

Attestations

SOC 2 Type II — independently audited controls for security, availability, and confidentiality — and HIPAA compliance.

Audit reports are available on request, not as a public download. Request one.

Business Associate Agreements

We sign a BAA before go-live. Request our template.

Where your data lives

Our voice AI runs on hardware we own and operate. Customer data — including PHI — is not sent to third-party AI providers for processing. We are HIPAA compliant.

Call recording and retention

Audit test-call recordings are shared only with the requester and deleted within 30 days on request — the same commitment stated in the audit-request consent language.

Access controls

Agent training, background checks for employees with call access, least-privilege access, and audit trails.

Corporate

Capitol Software, 8601 Six Forks Road, Forum Dr Ste 400, Raleigh, NC 27615, United States.
Delivery operations in Amman, Jordan. 20+ years, four granted US patents.