Data Processing Addendum

Roles

You decide why and how caller information is used. 365vox processes it only on your documented instructions to provide the service.

Our commitments

• Confidentiality — people who can access your data are bound by confidentiality
• Security — encryption at rest, role-based access, logged access with exportable audit logs
• No secondary use — your call data is never used to train models
• Data location — the United States or Canada, as specified in your contract
• Subprocessors — engaged under written terms that protect your data; a current list is available on request, covering every party in the call path
• Incidents — notification without undue delay after we become aware of a breach affecting your data
• Assistance — help responding to individuals’ requests and regulators
• Retention and deletion — retention you choose up to 30 days; at the end of service, a complete export followed by deletion within 30 days and written confirmation

Privacy frameworks

Read how we approach GDPR and PIPEDA and PHIPA.

Healthcare customers

Where HIPAA applies, we also sign a Business Associate Agreement at onboarding, before your first call. See HIPAA and BAAs.

Getting the DPA

Email ema@365vox.com to receive the full DPA for signature.

Questions about this page? Email ema@365vox.com.