Trust & security

Your data belongs to your business

Each business has its own account. Its contacts, conversations, calls, quotes and invoices are only shown to the people who have access to that account.

• We do not sell, rent or monetize personal information.
• We use your data only to provide the service you contracted.
• Private customer conversations are not used to train public AI models without your written consent.

Call recordings and transcripts

When the AI receptionist answers, the recording, the transcript and the call summary are saved in your own CRM account.

• Only your account’s users can open them.
• You decide who on your team gets access.
• You can ask us to delete them (see “Deleting your data” below).

Payments

Card payments are processed by a payment processor certified to PCI DSS Level 1, the highest level of the card industry security standard.

• Card numbers are typed on the processor’s secure page.
• Autorys never sees or stores your full card number.
• You get a receipt for every payment.

Encryption in transit

Every Autorys site and panel works only over HTTPS. What travels between your browser and our servers goes encrypted.

• Browsers are told to always use the secure connection (HSTS).
• Passwords are stored as one-way hashes: nobody can read them, not even us.
• Clinical files in the health module are also stored encrypted.

Account access

Each person enters with their own email and password, and can add a second step for extra protection.

• Optional two-step verification with an authenticator app, for every CRM.
• Sessions close after a period without use and if they are opened from a different browser.
• Password reset links work once and expire after one hour.

Protection against attacks

Our platform watches every request and blocks attacks automatically, without waiting for a person.

• Attempts to inject code into the database are blocked on the first try.
• Repeated wrong passwords pause access automatically.
• Every form is protected against bots and repeated attempts.
• We apply security updates to our servers.

Backups

A backup copy of the platform data is made every night, and another copy is kept on a different server, so one failure does not take your information with it.

• Every copy is checked with a digital fingerprint.
• Copies are only reachable by our technical team.

Deleting your data

You can ask us to delete your data or your conversations at any time. We process the request within 30 days at most, unless the law requires us to keep something longer.

How to request deletion → Privacy notice → Terms →