Security & Compliance

Your data security is our priority

Enterprise-grade security, Canadian data residency, and full compliance with privacy regulations. Your business data is safe with Polaris Voice.

PIPEDA Compliant
PHIPA Compliant
SOC 2 Type II

Enterprise-grade security

The same security standards trusted by banks and healthcare organizations.

AES-256 Encryption

All data is encrypted at rest and in transit using AES-256 encryption, the same standard used by banks and government agencies.

Canadian Data Residency

Your data never leaves Canada. All call recordings, transcripts, and customer data are stored in Canadian data centers.

Access Controls

Role-based access control, multi-factor authentication, and detailed audit logs for every action in your account.

No AI Training

Your calls are never used to train AI models. Your business conversations remain private and are used solely to serve you.

Regular Audits

Annual third-party security audits and penetration testing to ensure our systems meet the highest standards.

SOC 2 Type II

SOC 2 Type II certified, demonstrating our commitment to security, availability, and confidentiality.

Compliance frameworks

We meet or exceed the requirements of major privacy regulations.

PIPEDA

Compliant

Personal Information Protection and Electronic Documents Act

Full compliance with Canada's federal privacy law governing how private sector organizations collect, use, and disclose personal information.

PHIPA

Compliant

Personal Health Information Protection Act

Compliance with Ontario's health privacy legislation, essential for medical clinics and healthcare providers.

HIPAA

Ready

Health Insurance Portability and Accountability Act

HIPAA-ready infrastructure for customers serving US patients or planning US expansion.

CASL

Compliant

Canada's Anti-Spam Legislation

All SMS communications comply with CASL requirements, including proper consent management.

How we handle your data

Transparency about what we collect, how we use it, and how long we keep it.

What We Collect

  • Call recordings and transcripts (stored in Canada)
  • Caller information (name, phone number, as provided)
  • Appointment and scheduling data
  • Usage analytics (anonymized)
  • Account and billing information

How We Use It

  • To provide and improve our AI receptionist service
  • To send notifications and appointment reminders
  • To generate analytics and insights for your dashboard
  • To provide customer support
  • To comply with legal obligations

What We Never Do

  • Sell your data to third parties
  • Use your calls to train AI models
  • Share data with advertisers
  • Transfer data outside of Canada without consent
  • Access your data without legitimate business purpose

Data Retention

We retain your data for as long as your account is active. Call recordings are retained for 90 days by default, or longer based on your plan settings. You can request deletion of your data at any time.

When you close your account, we delete all your data within 30 days, except where we're required to retain it for legal or regulatory purposes.

Infrastructure & redundancy

Built for reliability and uptime.

99.99%

Uptime SLA

3

Canadian Data Centers

24/7

Security Monitoring

Daily

Encrypted Backups

Security questions?

Our security team is happy to answer questions, provide additional documentation, or discuss your specific compliance requirements.

Secure, compliant, and ready for your business

Start your free trial with confidence. Your data is protected by enterprise-grade security from day one.

Start free trial