Security
Your customers. Your brand. Your data
Clair calls your customers in your name. Here is how we keep them, your brand and your data safe.
Your customers
What your customers experience
A short call with a reason, in their own language. And Clair always says it’s an AI.
Told it’s an AI, from the first sentence
Every call starts by saying it’s an AI reaching out on your behalf, and that it’s recorded.
A person whenever they want
They can ask for a person, end the call or ask not to be contacted again, at any time.
No call without a reason
Clair only reaches out at the right time, with something it can help with.
Never too often
You set how often each person can be contacted, and when Clair stays quiet.
In their own language
Each customer talks with Clair in their own language.
Business customers only
Clair talks to people at your business customers, never to consumers.
Your brand
Clair speaks in your name, by your rules
You decide how far it goes, from only listening to solving things on its own.
What Clair always does
- Runs only the programs you approve
- Answers only from your content
- Sounds like your company, relaxed or formal
- Hands over your way: a task, a ticket or a booked call
- Changes nothing without the customer’s OK
What Clair never does
- Promises dates, deals or anything you haven’t approved
- Pretends to be a person
- Pushes a sale
- Claims it can solve what needs your team
Your data
Where your data lives, and who handles it
Stored in Sweden
Clair runs on Microsoft Azure in Sweden. Your customer data, conversations and results are stored there.
Some AI processing in the US
Some AI processing, for voice and language, takes place in the United States, under the EU-US Data Privacy Framework and standard contractual clauses. Providers keep copies for at most 30 days.
Encrypted
AES-256 at rest, and TLS 1.2 or higher in transit.
Not used to train AI
Your data and your customers’ words are never used to train AI models, by us or by our sub-processors.
You own the data
You are the controller. We are the processor, under a data processing agreement.
Access by role
Role-based access for your team, separation between customers, and least-privilege access for our staff. Single sign-on on request.
- Infrastructure
- A web application firewall, databases without public network access, logging, monitoring and a documented incident response process.
- Retention
- Recordings and transcripts are deleted no later than 90 days after the conversation, unless your DPA sets another period.
- Your security review
- SOC 2 Type II and ISO 27001 are in progress, and our DPA is ready to sign.
The full list of sub-processors is in your DPA, and we share it on request. How we handle personal data is in our privacy policy.
Our service
Official Clair domains
beclair.io is Clair’s public website. call.beclair.io and organization subdomains of byclair.io host Clair’s AI-moderated voice conversations. Customers can also host conversations on a domain of their choice after connecting and verifying it with Clair.
FAQ
Security questions we get
Where is our data stored?
In Microsoft Azure data centers in Sweden. Some AI processing, for voice and language, takes place in the United States, and providers keep copies for at most 30 days.
Which providers process a conversation?
Our AI voice and language providers, each under a data processing agreement. The full list of sub-processors is in your DPA, and we share it on request.
Do you train AI on our customers’ conversations?
No. Your data and your customers’ words are never used to train AI models, by us or by our sub-processors.
Can a customer opt out?
Yes. At any time, a customer can end the call or ask not to be contacted again.
How long do you keep recordings?
Recordings and transcripts are deleted no later than 90 days after the conversation, unless your DPA sets another period.
Can our security team review your documents?
Yes. We answer your security questionnaire and send our DPA, before or after the demo.
Bring your security questions to the demo
Ask what your legal or security team needs to know.