Security
Precise controls. No borrowed certifications.
This page describes how ServiceLine AI protects tenant data and call workflows. It is not a SOC 2, PCI, TCPA, or HIPAA certification claim.
Tenant isolation
Organization data is separated by authenticated membership. Guessing identifiers does not grant access.
Authentication
Sessions are established through Supabase Auth with secure server-side session handling in the web app.
Role-based access
Owner, admin, dispatcher, and viewer permissions are enforced in the API—not only in the UI.
Data encryption
Provider credentials are encrypted at rest with a versioned application key outside the database.
Provider security
Webhook signatures are verified. Tokens are never exposed to the browser.
Recordings & transcripts
Recording storage is off by default. Transcript retention is configurable. Fresh authorized URLs are used for playback.
Retention & deletion
Export and deletion workflows are available for authorized roles, with audit events recorded.
Responsible AI behavior
The assistant discloses that it is automated, follows company rules, and escalates when a human is required.
Implementation notes for engineers (row-level security, encryption key rotation, webhook idempotency) live in product documentation—not in the marketing hero.
Get started