Legal & Trust

Legal & trust center

Every policy, agreement and control in one place, written to read like the real, publishable documents they are.

Privacy Policy

What we collect through our forms and newsletter, why, and the rights you have over your data.

Policy

Cookie Policy

How we use browser storage. We keep it minimal: preferences and consent only, no third-party tracking.

Policy

Terms of Use

The terms that govern this website. They are separate from the written agreement that governs the platform.

Terms

GDPR & Data Processing

Our roles as controller and processor, transfer safeguards, and how a Data Processing Agreement fits in.

Data protection

Subprocessors

The categories of vendors that help us run TelVox: hosting, storage, transactional email and messaging.

Vendors

Security & compliance

AES-256-GCM at rest, an append-only audit trail, org-scoped isolation and short-lived tokens, all built in.

Trust

Agreements & certification

A Data Processing Agreement (DPA) and a Business Associate Agreement (BAA) are available on request, and TelVox is built for HIPAA workloads. The platform is engineered to SOC 2 Type II and ISO 27001 controls, with formal certification in progress. We don’t claim certifications we don’t yet hold.

Request a DPA or BAA