Security, compliance, and privacy — by design.
VoiceConnect handles sensitive conversations for businesses across healthcare, veterinary, and service industries — across the United States, Canada, and Europe. Here’s how we protect the data our platform touches, and how we meet the regulatory obligations that apply to your business.
Three commitments.
Security
- Encryption of data in transit and at rest
- Role-based access controls and least-privilege access
- Audit logging of access to sensitive data
- Configurable data retention and deletion
- Breach notification protocols aligned to applicable law
Compliance
- PIPEDA-aligned data handling across Canada
- US healthcare: HIPAA-enabled deployments and Business Associate Agreements (BAAs) are in active development — coming soon
- Canadian healthcare: PHIPA-aligned deployments with service-provider agreements — in development (coming soon)
- Veterinary: governed by veterinary confidentiality law and owner-privacy rules — not HIPAA
- TCPA-safe (US) and CASL-compliant (Canada) calling practices
Privacy
- You own your data — we process it only to provide the service
- We do not use your data or your callers’ data to train base AI models
- Sub-processors bound by confidentiality and data-protection terms
- Full transparency through our Privacy Policy and Data Processing Addendum
Built for every border you cross.
Healthcare and privacy law works differently in the US, Canada, and Europe. VoiceConnect is built to meet the obligations that apply to your business, wherever you operate.
United States
For U.S. healthcare, HIPAA-enabled deployments are in active development. When available, VoiceConnect will operate as a Business Associate under a signed Business Associate Agreement (BAA), with protected health information handled on HIPAA-eligible infrastructure. This is coming soon and not yet offered, so VoiceConnect is not currently used to store U.S. PHI. Non-healthcare deployments are covered by our standard security and privacy commitments.
Canada
There is no single Canadian equivalent to HIPAA. Canadian healthcare data is governed by PIPEDA together with provincial health-information laws such as Ontario’s PHIPA. Canadian healthcare deployments — with service-provider agreements carrying the confidentiality, safeguard, retention, and breach-notification terms these laws require — are in active development and coming soon; VoiceConnect is not yet offered for storing Canadian health information. Our PIPEDA-aligned handling and cross-border transfer practices (PIPEDA’s comparable-protection standard, with Quebec Law 25 privacy-impact assessments where applicable) apply to the non-health personal information we process today.
Europe
For customers in the European Economic Area and the UK, VoiceConnect aligns with the GDPR as a data processor. We support data-subject rights — access, erasure, and portability — and breach notification within GDPR timelines, and provide Data Processing Agreements incorporating Standard Contractual Clauses for international transfers on request. For healthcare and other high-risk processing, we work with customers to support their Data Protection Impact Assessments (DPIAs).
Need our compliance documentation?
Our Data Processing Addendum and current sub-processor list are available to customers and prospects on request. A Business Associate Agreement will be available when HIPAA-enabled deployments launch (coming soon). Reach our team at legal@voiceconnect.io.