Your calls. Your CRM. Nothing kept that does not need to be.
Redialler sits between your browser, the voice carrier, and your CRM. It holds as little as it can, encrypts what it must hold, and writes the CRM copy as processing completes. Call artifacts then follow the published cleanup schedule.
- encryption for all data in transit
- TLS
- at rest for CRM and carrier credentials
- Encrypted
- default call artifact retention before scheduled cleanup
- 180 days
- default extended retention while CRM sync or processing is incomplete
- 360 days
Where it lives, who touches it, and how it leaves.
We are working toward formal certification and will list it here when done. Until then, this page says exactly what happens to your data.
Where data lives
Runtime state such as queues, sessions, and call logs is stored in Convex. The app runs on Vercel. Your CRM stays the source of truth for contacts, notes, and outcomes.
Who processes it
Redialler's voice carrier carries calls and recordings. Attio holds your CRM data. Clerk handles sign-in. OpenRouter transcribes and cleans up notes. Convex stores runtime state, including encrypted business and representative details supplied for carrier verification. Vercel hosts the app. Stripe takes payments. Sentry receives error reports. Google Analytics measures the marketing site, only with visitor consent.
Recording consent controls
New organisations start with recording off. Admins can enable it, choose the mode, or turn it off in workspace settings. You are responsible for consent and disclosure in your jurisdiction, and Redialler can play a notice so the other party knows.
Access control
Users sign in through Clerk. Organisation admins manage membership and roles. App routes check workspace boundaries and role permissions.
Deletion
Redialler keeps recordings and transcripts for playback after CRM sync. Call artifacts normally enter scheduled cleanup after 180 days, extended to 360 days when processing or CRM sync is incomplete under the default settings. Authorised admins can change retention periods. A workspace legal hold pauses scheduled cleanup. Contact hello@redialler.com for account closure and deletion; support handles requests within 30 days, subject to legal retention obligations.
Incident contact
Found a problem? Email hello@redialler.com with the subject Security. A person reads it and replies.
What we do not do.
Some things are simpler to promise than to explain. These are firm.
we never
- Sell your data or your contacts' data to anyone.
- Train AI models on your call audio or transcripts.
- Copy your CRM. Redialler reads what it needs and writes results back.
- Treat Redialler as a replacement for your durable CRM records.
Questions about security.
Are you SOC 2 or ISO 27001 certified?
Not yet. We are working toward formal certification and will list it here when done. Ask us for the current status and we will tell you plainly.
Who can listen to my recordings?
Authorised users can play recordings from Redialler, and from Attio when the recording has been saved there. Access in the two services is managed separately. Contact support for help with a specific call.
Where is data stored?
Runtime data is stored in Convex and served through Vercel. Calls and carrier-held recordings pass through Redialler's voice carrier. Your CRM data stays in Attio.
Can I get a data processing agreement?
Yes. Our DPA is published at /dpa and applies to every customer. Email us if you need a signed copy.
More conversations by lunchtime.
Set up your calling workspace in minutes. Questions about your CRM or team? Talk to us before you start.