Security and Reliability
Flexible infrastructure, encryption and access controls, regulatory attestations, and failover at every layer, so your operation never misses a beat.
Book a demoDeployment flexibility
Run on managed cloud or in your own tenant. Whichever your isolation, residency and network requirements call for.
- Cloud or dedicatedFully managed infrastructure, or your own tenant on AWS, GCP or Azure.
- Multi-tenant or single-tenantStrict tenant isolation by default, with fully isolated environments where needed.
- In-country residencyRegional deployments keep voice traffic, recordings and interaction data where compliance requires.
- Voice trafficStays in region
- RecordingsStays in region
- Interaction dataStays in region
Data protection
Encrypted in transit and at rest, and visible only to the people you grant access, on the resources you choose.
- Encryption and retentionTLS 1.2+ in transit and AES-256 at rest, with per-workflow retention that deletes automatically.
- Zero-trust networkingInternal services run on private networks with no public exposure.
- Custom roles and scopesRoles set what each person can do, scope tags set where, and your identity provider’s groups map to both through SSO.
- Edit workflows
- Publish to production
- Edit table rows
- Change schemas
- In transitTLS 1.2+
- At restAES-256
Compliance
Independent attestations and regulatory-aligned controls for the reviews enterprise procurement actually runs.
- SOC 2 Type II and ISO 27001SOC 2 Type II attested and ISO 27001 certified by independent auditors. The full SOC 2 report is available to qualified customers under NDA.
- GDPR and HIPAA alignedConfigurable retention, right to erasure, data processing agreements, and BAAs where applicable.
- Frameworks and regulationsControls mapped to NIST CSF, supporting your DORA obligations as an ICT third-party provider and meeting the EU AI Act transparency rules.
- SOC 2 Type IIIndependently attestedAttested
- GDPRRetention, right to erasure, DPAsAligned
- HIPAABAAs where applicableAligned
- ISO 27001Independently certifiedCertified
Reliability
Failure is assumed at every layer: infrastructure, model providers, and the platform itself, so a single provider outage never impacts a customer.
- Multi-zone failoverDeployed across availability zones with automatic failover, and voice traffic segmented from application load.
- Model-agnostic with failoverAutomatic switching across LLM, TTS and STT providers on outage or latency degradation.
- Telephony resilienceIn the unlikely event of an outage, inbound calls route to your existing call center.
- LLMPrimaryBackup provider
- Text to speechPrimary
- Speech to textPrimary
Everything the climb produces stays yours
The record your agents generate becomes the most valuable thing the operation owns. It lives in your own isolated instance, under retention rules you set, in the region compliance requires, and it never trains anyone else’s models.
Enterprise SuperintelligenceFAQs
Yes. Alongside HappyRobot’s fully managed cloud, you can run in your own single-tenant environment on AWS, GCP or Azure where isolation, data residency or network architecture requires it. A dedicated tenant also gives you control over when upgrades land.
It is encrypted with TLS 1.2+ in transit and AES-256 at rest. Internal services run on private networks with no public exposure, and retention is set per workflow, so recordings and interaction data are deleted automatically on the schedule you choose.
Whoever you grant it to. A role sets what someone can do and a scope sets where: start from Owner, Editor or Viewer, or duplicate one into a custom role, then use scope tags to limit it to specific workflows, Context tables or phone numbers. Your identity provider’s groups map to those grants through SSO, and API requests follow the same permissions, so an analyst can read outcomes without being able to publish a change.
In the unlikely event of an outage, inbound calls route to your existing call center, so callers reach your team. That sits on top of multi-zone infrastructure failover and automatic switching between LLM, TTS and STT providers, so a single provider outage never impacts a customer.
The SOC 2 Type II report, the ISO 27001 certificate, a data processing agreement, and supporting security documentation, all available to qualified customers under NDA. Controls are mapped to NIST CSF and aligned with GDPR and HIPAA. We support your DORA obligations as an ICT third-party provider and meet the EU AI Act transparency rules.
Multi-tenant is the default and already enforces strict isolation at the application, database and infrastructure layers, including a dedicated Context instance per organization. Single-tenant adds a fully isolated environment in your own tenant and control over when upgrades land, which is usually what tips it for regulated markets or where data cannot leave a country.
