Security and privacy
What we do with your data today, and what we have not done yet. Updated 11 October 2026.
What is not in place yet
- We are not SOC 2 or HIPAA certified. Please do not use Tansivo for patient health records or other regulated health data.
- We do not yet offer a data processing agreement (DPA).
- Transfer to a person during a call is not available yet.
Your data is kept apart
Each workspace’s agents, calls, transcripts and documents are separated by the database itself, with row-level security enforced for the role the application runs as. A query that forgets to filter by workspace returns nothing rather than another customer’s rows.
Encryption
- All traffic to and from Tansivo is encrypted with TLS.
- The keys and tokens of accounts you connect (phone carrier, WhatsApp, Google and others) are encrypted before they are stored.
- Our servers are hosted with a major cloud provider, on disks encrypted at rest.
Recordings and retention
- Calls are recorded by default so you can review them. You can switch recording off per agent.
- Phone callers hear that the call is recorded before the conversation starts.
- Call recordings and their transcripts are deleted after 30 days.
The AI says it is an AI
Every agent is instructed to say it is an AI assistant whenever someone asks whether they are talking to a person. Calls to your customer lists only go out inside each person’s local calling hours and skip your do-not-call list. You are responsible for having your contacts’ consent to be called.
Who can see what
People sign in with an email and password, and each workspace member has a role: owners manage billing and the workspace, admins manage agents and numbers, and members can use agents and read calls. Interview candidates and website visitors never see your configuration.
Analytics on this website
We count visits to tansivo.com with Umami, running on our own server. It sets no cookies, does not follow you to other sites, and sends nothing to a third party. While you are on the site, your browser tab remembers which site or link brought you here, so a sign-up can be credited to the channel that led to it; that is forgotten when the tab closes.
Providers that process your data
To run a conversation, Tansivo sends audio or text to these kinds of services:
- Speech providers, which turn the caller’s speech into text and the reply into a voice
- Language-model providers, which write each reply
- A sign-in provider, for accounts and passwords
- A cloud provider, which hosts our servers
Your phone carrier (such as Twilio) and Meta, for WhatsApp and Instagram, are your own accounts, connected by you.