Security

Built for the calls you can’t leak.

Sales calls carry names, phone numbers, prices and promises. Here is exactly how CallSight protects them — in plain words.

IsolationEvery table carries the company it belongs to, and the database itself refuses to return another company’s rows. Isolation doesn’t depend on the app remembering to filter.
KeysThe keys to your phone line, CRM and AI providers live in an encrypted vault. They can be written, but never read back through the app or sent to a browser.
AudioRecordings sit in private storage. Each time someone presses play, a signed link is created for them, and it stops working shortly after.
RetentionOld recordings are purged automatically under a retention period agreed with you. Transcripts and scores stay, so trends survive.
AccessOwners, managers, reps and read-only viewers. Settings, users and keys change only through checked server functions, never straight from a browser.
MonitoringA daily health check, and alerts if calls get stuck or a line goes quiet for two working days, so a broken connection is fixed rather than discovered weeks later.
Where your data lives

In the EU. In one place. Isolated.

Call audio, transcripts, scores and the search index behind Echo are stored in Frankfurt, Germany, on Supabase. Data is encrypted in transit and at rest. Calls only leave that home to be transcribed and analyzed by the AI providers listed below — and come straight back.

Who processes what

ProviderWhat it does for CallSightWhen
SupabaseDatabase, file storage and server functions (EU — Frankfurt)Always
OpenAITranscribing calls; building the search index Echo usesEvery call
AnthropicAnalyzing and scoring calls; answering as EchoEvery call, every question
VercelHosting the CallSight appAlways
CloudflareWebsite hosting, demo-request storage and notification deliveryWebsite only
GoogleEmail inbox for responding to demo requestsDemo requests only
monday.comReceiving call summaries in your CRMOnly if you connect it
WhatsApp messaging providerSending lead alerts to your teamOnly if you turn alerts on

OpenAI and Anthropic are used through their business APIs, which do not use your data to train their models.

Recording consent

Whether a call may be recorded depends on where you and your customers are. CallSight records the calls that pass through the line you connect; telling customers that a call is recorded, where required, is your team’s responsibility. We’re happy to walk through how other teams handle it.

Questions from your security team?

Bring them to the demo — we’ll go through the setup end to end.

Book a demo