Security and data handling for your Oira deployment
Understand the information your workflow uses and the responsibilities involved before connecting Oira to live business systems.
Information used in a call
Depending on the configured workflow, the service processes caller details, conversation content and information retrieved from your connected systems with strict purpose limitation.
Access to connected systems
Deployments adhere to the principle of least privilege. System connections use encrypted credentials in transit and at rest, scoped exclusively to required actions.
Retention and deletion
Custom retention periods can be specified for audio recordings, transcripts, logs and booking records. Business customers have clear procedures to request data erasure.
Suppliers & processing locations
Hosting, telephony carriers and AI infrastructure providers are documented in our subprocessor list with appropriate international transfer mechanisms where applicable.
Recording & caller information
Automated caller announcements, disclosure of AI identity, and call recording notices are configurable to satisfy your regulatory obligations under applicable privacy law.
Assessment documentation
We provide comprehensive Data Processing Agreements (DPA), technical control summaries and incident reporting processes for compliance review prior to rollout.
Security Questions
Can you guarantee a service is risk-free?
No system should be described as risk-free. We review the actual controls, vendor dependencies and scope relevant to your deployment to ensure full defense-in-depth.
How do I report a security concern?
Contact our security team at security@oira.ai. Please do not include credentials or customer personal records in initial messages.
Where are privacy rights explained?
Please see our Privacy Policy for full details on personal data handling and how data subjects can exercise their rights.
Request deployment information
Tell us what your technical security assessment requires and the workflow you are considering.