Security
Built for regulated industries from day one.
Supervisr listens to sensitive conversations, so we hold ourselves to the same standards as the teams we supervise for. SOC 2 compliant and encrypted end to end, with role-based, logged access. Your data stays in Canada, the US or the UK — under Law 25 and PIPEDA — and is never used to train a shared model.
SOC 2 compliant
Our controls are independently audited against the SOC 2 Trust Services Criteria.
Encrypted everywhere
Call audio, transcripts and results are encrypted in transit (TLS 1.2+) and at rest (AES-256).
Least-privilege access
Role-based access, single sign-on and audit logs on every action taken in your workspace.
Data residency
Choose where your data lives, with retention windows that match your own policies.
Your data stays yours
We never use customer calls to train shared models. Delete anything, any time.
Ready for review
Security documentation and our SOC 2 report are available to customers under NDA.
Data residency
Your data stays in the jurisdiction you choose.
Canada
Law 25 · PIPEDA
United States
SOC 2 · CCPA
United Kingdom
UK GDPR
Law 25 and PIPEDA
We operate under Quebec's Act respecting the protection of personal information in the private sector (Law 25) and Canada's PIPEDA, with a named person in charge of privacy and records of processing for every tenant.
Retention you set
Call and transcript data is kept for 12 months by default, up to 24 where you configure it, then deleted. On termination you can export for 30 days before deletion.
Full detail, including our person in charge and how to make a request, is in our privacy policy.