Security controls, clearly explained.
Your customer data and conversation records are some of your most sensitive assets. We treat them that way.
Security by design
Understand the controls available today, their limits, and what remains on the roadmap.
Data Encryption
Encrypted in transit (HTTPS/TLS, provided by our hosting platform). Provider credentials and integration secrets are encrypted at rest with AES-256-GCM.
- Hosting-provided HTTPS/TLS
- AES-256-GCM for credentials and secrets
Tenant Isolation
Every database query is scoped to your workspace.
- Workspace-scoped database queries
- Workspace-scoped leads, campaigns and conversations
Access Controls
Workspace roles control team management and account access. Data export and workspace deletion are owner-only.
- Owner, Admin and Member roles
- Session management
- MFA (roadmap)
Audit Logging
Configuration changes, consent events and admin actions are logged with attribution.
- Configuration and consent events
- Attributed admin actions
- Audit records are deleted with the workspace
Compliance Controls
Built-in controls for TCPA, DNC handling, quiet-hours enforcement, and AI disclosure. Customers retain legal responsibility for their campaigns.
- Quiet hours enforcement for outbound calls and texts
- DNC list management
- Consent tracking and opt-out handling
- AI disclosure scripting
Prompt Safety
Configure agent guardrails, knowledge-grounded responses and escalation rules. AI responses can still be inaccurate and should be reviewed.
- Prompt injection defense
- Output guardrails
- Knowledge-grounded responses
- Configurable escalation rules
Agenis provides tools to help you comply with TCPA, DNC, and similar regulations — including quiet-hours enforcement, AI disclosure scripting, and DNC list integration. However, you remain legally responsible for ensuring your outreach campaigns comply with all applicable laws in your jurisdiction. Consult legal counsel before launching campaigns.