Trust & security
Your calls stay with you. By design.
Audio stays on the agent's PC, text is masked before it's stored, and Orian Control runs in your environment.
01Our commitments
What we commit to.
A release that breaks any of these does not ship.
01
Audio never leaves the agent's PC
It is processed in memory and never saved. Thin clients send it only to your own server.
02
Text is masked before it's stored
Unmasked text exists only in memory, for a moment.
03
Runs in your environment
On your servers or in your own cloud account. We have no access to content.
04
No training on your data
Unless you run that training yourself, or agree to it in writing.
05
No content in logs
Logs and crash reports are scrubbed before they are kept.
06
No voiceprints
Speakers are told apart by audio channel, never by voice.
07
No emotion reading
Nothing is inferred about agents from voice, face or any biometric signal.
08
No surveillance
No screen recording, keystroke logging or webcam.
09
Agents see their data first
Agents see their own scores before anyone else, and can dispute them.
02Where data goes
Where each kind of data can go.
Agent's PC
Orian Desk
Your environment
Orian Control
Out to
Where results go
Audio
Microphone and softphone sound
Leaves?Never. Not even saved to disk.
Unmasked text
Speech before masking
Leaves?Never. It exists only in memory.
Masked transcript
Text after masking
Leaves?Only to the AI account you approve.
Results
Summaries, fields, scores, flags
Leaves?To client systems and the portal, as you set.
Operational
PC health and versions
Leaves?Seat counts for billing. Health data only if you opt in.
| Data | Examples | Leaves your environment? |
|---|---|---|
| Audio | Microphone and softphone sound | Never. Not even saved to disk. |
| Unmasked text | Speech before masking | Never. It exists only in memory. |
| Masked transcript | Text after masking | Only to the AI account you approve. |
| Results | Summaries, fields, scores, flags | To client systems and the portal, as you set. |
| Operational | PC health and versions | Seat counts for billing. Health data only if you opt in. |
03Masking
Masked the moment it's heard.
These are always masked. Each programme decides how to treat claim, policy and member numbers.
- Card numbers
- Social Security numbers
- Bank account and routing numbers
- National IDs: Aadhaar, PAN, UK National Insurance
- Dates of birth
- Phone numbers and email addresses
- Names and addresses
- Any run of four or more digits during payment and ID checks
Agent edits are masked again. Copied fields clear from the clipboard after 30 seconds.
Heard on the PC · in memory only
Sure,
What is stored and sent
Sure,
04Reliability
What we promise when things go wrong.
We break things on purpose before every release to test these.
A call never depends on Orian
Orian listens alongside the call, never in the audio path.
Confirmed work is never lost
Wrap-ups are queued, confirmed, retried and backed up.
Silent rather than wrong
If an answer isn't ready and right in time, nothing is shown.
Nothing stops a call in progress
Not licensing, not updates, not outages.
Every failure is visible
To the agent, the team lead and IT.
Every change can be rolled back
Updates, playbooks, settings and connectors.
05Regulated work
Designed for the rules your clients live by.
Designed for HIPAA, PCI and Reg F programmes, and for privacy laws where your agents sit. Compliance is shared, so we give you templates for your side.
HIPAA
Health data masked by default, and AI only on your own account
PCI DSS
Card numbers kept off the call and masked on sight
Reg F, FDCPA, TCPA
Required disclosures, banned phrases and call-frequency limits
GDPR and UK GDPR
Retention per programme, plus search, delete and export requests
EU AI Act
No workplace emotion recognition, and clear AI notices
India DPDP and Philippines DPA
Agent notices and consent choices on first run
FCA Consumer Duty
Vulnerability cues for the agent, with no label kept on the customer
Offshoring rules
Location notices and transfer-to-onshore prompts, logged
06For your security team
Everything IT asks for, in one pack.
Signed installers
With published hashes and guides for your endpoint security tools.
Software bill of materials
A full component list with every release.
Tamper-evident audit log
Every admin action and data access, exportable to your SIEM.
Your sign-in
Single sign-on through Entra ID or Active Directory.
Tested from outside
Independent penetration tests and a vulnerability disclosure policy.
Paperwork ready
Data-flow sheet, consent templates and contract wording.
One standard on every call. Proof for every client.
Bring your QA form. We'll show Orian on a live call, then plan a free 30-day pilot if it fits.