Skip to content
Security & governance

Auditable by design.

Governance isn’t a checkbox we bolt on — it’s wired into every answer, every record, and every charge, so you can prove what the AI did.

GDPR data-subject requests
GDPR
Hash-chained audit log
No training on your data

Guardrails on every answer

Jailbreak detection, topic control, and grounding checks run on every reply — always on, never optional.

Hash-chained audit log

Every action is recorded in a tamper-evident chain and independently verifiable.

/v1/audit/verify

Dispute any charge

Every verified resolution is inspectable and reversible — dispute any charge in one click.

How we protect your data

Security practices

Encryption in transit

All traffic is encrypted with TLS. Application secrets and channel credentials are encrypted at rest in the database and access-controlled. Full volume-level encryption at rest is not yet configured — we will say so here the day it is.

Tenant isolation

Every workspace’s data is isolated at the database layer with row-level security and forced tenant scoping.

Scoped API keys & signed webhooks

Grant least-privilege access with scoped keys; verify every webhook with a signed, timestamped signature.

Guardrails & PII scrubbing

Jailbreak and grounding checks run on every reply — always on, never optional. PII is scrubbed from the reasoning traces we store and the ticket corpus we index; the live reply itself is not redacted, because the agent needs those details to help.

No training on your data

No customer content is used to train foundation models. Callario runs in a single hosting region today; there is no data-residency election, and we will not imply one until there is.

Hash-chained audit log

Governance actions and dispute decisions are recorded in a tamper-evident chain you can verify yourself via /v1/audit/verify. Resolution and usage records are ordinary rows — auditable and disputable, but not cryptographically sealed.

Callario holds no SOC 2 attestation, and no audit has begun. We’re happy to share our current posture and roadmap with design partners under NDA — and we’ll say so here the day that changes.

Security your team can actually verify.

Talk to us about compliance, governance, and the audit trail.

Supervised alpha · No credit card · You’ll never be billed for a handoff.