Skip to content
Security and HIPAA

Protecting what matters to your business.

Your callers trust you with their information. Xaller.ai brings together privacy controls, secure access and clear data-retention practices to help you protect that trust.

Encryption

  • Information sent to and from Xaller.ai is protected by encryption.
  • Recordings, transcripts, summaries and caller details are encrypted while stored.

Business Associate Agreement

  • Healthcare accounts review and sign our finalized BAA during setup, before any patient call is answered.
  • You can download the signed copy any time from Settings.
  • Healthcare activation stays unavailable until the required privacy agreements and service checks are complete.
Read the BAA

90-day retention

  • Recordings, transcripts and call content are deleted automatically 90 days after each call.
  • Every call shows the date its content will be deleted.
  • Call times, durations and outcomes stay, so your reports still add up.

Audit logs

  • Every view of a recording or transcript is logged with who opened it and when.
  • Our support team can only open call content through an audited, time-limited request with a stated reason.
  • You see those accesses in your security log.

Access controls

  • Two-step verification is required to access patient information in live healthcare accounts.
  • Healthcare accounts sign out after 15 minutes of inactivity.
  • Passwords are checked against known data breaches, and repeated failed sign-ins pause the account.

Notifications without patient details

  • Healthcare call notifications leave out caller names, numbers and reasons.
  • You open the call in Xaller.ai, behind two-step verification, to see them.
  • Patient information never reaches payments, analytics or error tracking.

Questions about privacy?

Read our Privacy Policy to understand how information is handled, or contact our team to discuss your business’s requirements.

Found a security issue? Email [email protected]. We reply within one business day and never take action against good-faith research.

Let’s build trust from the first call.

Join the waitlist to hear about early access and discuss what your business needs.

Join the waitlist