Your customers’ conversations, handled the way your compliance team would.
The controls below are properties of the platform — enforced in code and in the database — rather than policies we ask you to take on faith. Ask us for anything you do not see here.
What protects your data, and how.
Your workspace is isolated
Each client’s leads, conversations, knowledge and recordings live in their own workspace. Isolation is enforced in the database with row-level security and checked again by the application on every request — another client’s record is simply not found.
Access you control
Role-based access with invite-based accounts and email verification. Members can be disabled in a click. Every sensitive action — invites, settings, funding, playing a recording — is written to an audit log you can read.
Encrypted, never trained on
Data is encrypted in transit and at rest. We do not train models on your data, and your conversations are processed by our model providers only to generate the reply in front of them.
Consent-first outreach
Every audience records the basis on which people agreed to hear from you. An opt-out is honoured on every channel immediately and permanently; “not interested” ends the campaign; calling hours and a cross-campaign cooldown are enforced by the platform, not by policy.
Recording is your switch
Call recording is off by default. When you switch it on, every call carries a spoken notice in the caller’s language, the file is stored privately to your account, the carrier’s copy is deleted, and ours is deleted after 90 days.
Grounded by construction
The agent can only quote a fact that is on record with a source. Prices and rates are repeated verbatim, labelled by configuration, never blended or estimated. Accuracy is measured continuously against your verified facts, and every answered call is reviewed against a fixed quality rubric.
Deploys never cut a call
A new version waits for every live phone call on the old one to finish before it takes over, and an unanswered number is never dialled twice by two versions at once.
Retention you can state
Demo conversations are deleted after 7 days. Recordings after 90. Data about a lead stays for as long as you are working the lead and is deleted on your request — and we pass a customer’s own request to you and help you act on it.
What the agent will not do.
The guardrails that keep a conversation inside what you would let a new salesperson say on their first day.
It only says what is on record
A price, rate, size or date is quoted only when a verified fact exists for it, with its source. A missing fact is never turned into a “no” or a guess.
It never decides for you
No credit decisions, no valuations, no on-road price arithmetic, no promise that anything is booked or reserved. Those go to your team, with the context.
It says what you approved
The opening line of every call and message is yours, word for word — including an AI disclosure if your policy requires one. Nothing is added or removed for you.
A person is always reachable
Anyone who asks for a human gets one: a rep is paged with the whole conversation, and the agent keeps answering routine questions meanwhile.
The providers we rely on.
Each processes data only to provide its part of the service. We will tell existing customers before adding one, and we sign a data-processing agreement with every customer who needs one.
We do not train models on your data. Your conversations are sent to a model provider only to generate the reply in front of them.
| Provider | Purpose |
|---|---|
| Meta Platforms (WhatsApp Business Platform) | Delivering and receiving WhatsApp messages |
| Anthropic | Generating the agent’s replies |
| Google (Gemini) | Voice conversation, speech and text models |
| Sarvam AI | Indic speech recognition and synthesis |
| Voyage AI | Search over your knowledge base |
| Plivo | Placing and answering phone calls |
| Supabase | Database and file storage |
| Railway | Application hosting |
| Vercel | Website and dashboard hosting |
| Cloudflare | Bot protection on the public demo |
How changes reach production.
Over 5,000 automated tests on every change
A change cannot reach production without passing the full suite, which runs with no network access so it can never touch a client’s data.
What the agent is told is pinned
The instructions and tool definitions the model receives are frozen byte for byte in version control. Changing a word is a deliberate, reviewed act.
Every turn is traceable
For each reply, the exact facts retrieved, the tools called and the model’s request and response are stored, so any answer can be explained after the fact.
Fail safe, not silent
When a dependency is down the agent says it will check with the team rather than guess; when a number cannot be dialled, the call is held with the reason named rather than dropped.
Questionnaires and agreements
Send us your security questionnaire and we will complete it. We sign DPAs and can describe retention, access and incident handling in your contract’s own words.
Your data, on request
Leads, conversations, bookings and reports export as CSV from your dashboard at any time. We delete a customer’s data on request and pass on a lead’s own request to you.
Report a concern
Found a vulnerability or something that looks wrong? Write to hello@konvolead.com and we will respond within one business day. Please do not test against a live customer’s number.
Related: Privacy policy · Terms. Last reviewed October 2026.
Bring your security team to the demo.
We would rather answer the hard questions in the first call than the last one.