Where compliance actually stands today
We'd rather tell you plainly where things stand than use vague language that implies more than is actually true.
SOC 2: actively in progress, not yet held
Dialbotix does not currently hold a SOC 2 certification. We are actively working toward it. If a completed certification is a hard requirement for your organization today, it's worth knowing that upfront rather than discovering it later in a procurement process.
GDPR and CCPA/CPRA: built around, not formally certified
As a data processor, we process customer lead data only on the customer's documented instructions, and the customer remains the data controller responsible for lawful basis and consent. Standard Contractual Clauses for international transfers, and a formal DPO appointment, are currently in review and implementation and are not represented as complete until formally documented and verified.
What we can actually tell you today
The data processing, data retention, encryption, and access controls pages on this site describe specific, concrete facts about how the platform handles data today, rather than general compliance language.
Frequently asked
Not yet. We're actively working toward SOC 2 but don't hold the certification today.
More security topics
This page describes, plainly, what data moves through Dialbotix, where it goes, and what protections are actually in place today, rather than a generic security statement.
Running a call involves more than one system working together. Here are the specific named services involved, and what each one is responsible for.
Retention isn't the same for every type of data in the platform. Here's specifically what's kept, for how long, and what deleting something actually does.
Have a specific compliance requirement?
Talk to our team honestly about what you need.
