Security

Runs in your account, with your keys

Deploy in your cloud or data centre, with controls your security team can inspect. Models trained on your data belong to you

What stays inside your environment

Recordings, transcripts and post-trained weights stay inside. Signed software and base models come in; optional health metrics contain no customer content

Your cloud

Your keys
  • Channels
  • Know
  • Agents
  • Pulse

Your model

Post-trained weights

Your systems

Private connectors

Conversation data

Recordings · Transcripts · Training sets

Customer data stays inside

Actioneer

Control plane

Signed inbound

  • Software updates
  • Base model weights

Optional outbound

Aggregate health metrics

No content or PII
Channels, identity checks, agents, Pulse, post-trained model weights, systems of record and conversation data stay inside your environment. Software updates and base model weights are signed inbound artifacts. Optional aggregate health metrics contain no customer content or PII. Customer data is not sent to the Actioneer control plane.

Controls

Data protection

In transit
TLS 1.2+
At rest
AES-256
Keys
Your KMS
Encryption

TLS 1.2 or higher in transit and AES-256 at rest, with customer-managed keys in AWS KMS, Azure Key Vault, Google Cloud KMS or an on-premises HSM

Personal data redaction

Names, phone numbers, account numbers and health identifiers are masked in analytics and removed from training sets at ingest

Access and isolation

Sign-in
SAML · OIDC
Permissions
Role-based
Staff access
Your approval
Access control

SAML 2.0 and OIDC SSO, SCIM provisioning and role-based access. No standing access for Actioneer staff; support sessions need your approval and are logged

Isolation

Each customer runs in an isolated deployment. Customer data and weights stay in your environment and never train another customer’s model

Records and retention

Audit trail
Replay in Pulse
Retention
Your schedule
Recording
Optional
Audit trail

Each agent decision, tool call, model version and policy version is logged and can be replayed in Pulse

Data retention

You set retention periods per data class, and they are enforced automatically. Call recording can be switched off, and an erasure request under GDPR or the DPDP Act removes a customer’s records from all stores

Agent governance

Release
Evaluation gate
Rollout
Canary + rollback
Outreach
Consent checks
Model governance

New prompts, policies and model versions must pass evaluation before release. You can route a configurable share of live traffic to the new version before full rollout, and roll back in one step

Consent and contact rules

The agent checks TCPA consent, quiet hours and frequency caps under CFPB Reg F in the US and TRAI DLT rules in India. An opt-out on one channel stops outreach on all of them

Deployment options

Managed

Actioneer cloud, single-tenant

Your VPC

Recommended

AWS, Azure or GCP

On-premises

Your own hardware

Environment
Live inDaysWeeksA quarter
Data residencyActioneer region of your choiceYour regionYour data centre
Operated byActioneerActioneer, in your accountYou, with Actioneer support

Certifications and attestations

  • SOC 2 Type II

    Attested

  • ISO/IEC 27001

    Certified

  • ISO/IEC 27701

    Certified

  • HIPAA

    BAA available

Bring your security and model-risk teams

Review the deployment and key management with us. We’ll complete your SIG, CAIQ or security questionnaire under NDA

How agents are trained