Your data. Your rules.
Our controls.

Every tenant table in our Postgres has a policy pinning reads/writes to the authenticated user. RLS enforced at the database, not just the app.

When we integrate with your operational database, we use a dedicated user with the minimum grants — SELECT on named tables, UPDATE on named columns only. No DROP, DELETE, or ALTER surface.

Every mid-call tool webhook and every post-call outcome webhook carries an HMAC signature we verify before mutating state. Prevents spoofing.

iVaak talks to your database from a single, static production IP. Clients whitelist that one address on their firewall — no wildcard ranges.

Call recordings, transcripts, and knowledge documents encrypted at rest in managed object storage. TLS in transit end-to-end.

Every call, every tool invocation, every outcome write-back logged with request ID, timestamp, and actor. Retention configurable per SOW.

Client-specific tabs gated by email allowlists. One tenant never sees another tenant's calls, agents, or outcomes — enforced at both UI and DB layers.

You can export every row of your call metadata, every recording, every transcript at any time. No lock-in. Your EHR/CRM schema stays authoritative.