Security.
How we protect your company's information: where it is stored, who can see it, how every change is recorded and how it is backed up.
Architecture
- One database per organization, with no shared tables, placed in the European Union or the United States when it is created.
- On-phone processing. Speech and language models run on the rep's phone with WebGPU; audio and transcript stay there.
- One origin. The app, its libraries and the models are served from Egret's own domain, at fixed versions; models download only with a pass signed by your organization.
- Infrastructure: Cloudflare Workers, Durable Objects and R2, encrypted in transit and at rest.
Access
- Passwords stored with PBKDF2 and their own salt, temporary lockout after failed attempts, single-use links for invitations and resets.
- Enterprise sign-in (OpenID Connect) with your provider's multi-factor authentication, and SCIM provisioning.
- Four roles, with permissions checked on the server for every operation; API tokens scoped by use and revocable.
Devices
Each phone or computer creates its own key when it connects and signs every request with it. Each signed request is accepted once. Deactivating a person disconnects all their devices at once.
Audit
Every change is recorded with who and when. Each entry carries the fingerprint of the one before, and one button verifies the whole chain.
Backups
A full copy every night, compressed and encrypted with AES-256-GCM using your organization's own key, kept in the same region as your database for 35 days; plus point-in-time recovery over the last 30 days.
Report an issue
Found a vulnerability? Write to datospersonales@datil.com. We reply within two business days and keep you posted until it is fixed.