Operations

Security and privacy

Operate Vozon with least privilege and responsible data handling.

Production checklist

  • Keep API and integration credentials in a secrets manager.
  • Use separate credentials for development and production.
  • Apply least-privilege organization roles and API scopes.
  • Rotate exposed or departing-user credentials immediately.
  • Verify webhook signatures and deduplicate events.
  • Limit collection and retention of transcripts, recordings, and metadata.
  • Never put personal data or credentials in prompts, source code, logs, screenshots, or documentation.
  • Review consent, disclosure, calling hours, suppression, and retention rules for every operating market.