Trust & Security
Security isn't a feature — it's the foundation. Here's how we protect your business, your customers, and every call Katie handles.
ICO Registered
WHOZA AI LTD (Company No. SC874716) is registered with the UK Information Commissioner's Office (ICO Registration: ZC077271) as a data controller and processor.
UK GDPR Compliant
All data processing follows UK General Data Protection Regulation and the Data Protection Act 2018. Our AI assistant identifies itself as AI only when a caller asks, and always answers honestly — it never claims to be human.
SOC 2 Type II Programme
SOC 2 Type II programme underway. Our security controls are SOC 2-aligned, with encryption in transit (TLS 1.3) and at rest.
Data Processing Agreements
All third-party processors (voice AI, payments, hosting) are bound by strict DPA contracts ensuring your data is handled securely and only for specified purposes.
Controlled Data Retention
Calls are not recorded — only live text transcripts are produced, and audio is never stored. Transcripts and call notes are visible in your dashboard for 30 days, then removed. Backend archive of transcripts and metadata for billing and dispute resolution is retained for 90 days. Caller contact records are retained while your account is active plus the dispute window. Earlier deletion of transcripts, metadata and caller contact records is available on request.
UK/EU Data Centres
All AI processing occurs within UK/EU data centres or jurisdictions with adequate data protection safeguards. No unauthorised international transfers.
For security-related questions or to request our full security documentation, contact us directly.
Contact Security Team