Healthcare, legal, and any business that cares about caller privacy deserve a clear picture of how their data is handled. Here it is — in plain English.
Our infrastructure is built to support HIPAA-compliance for healthcare customers. We sign Business Associate Agreements (BAAs) with healthcare practices. Patient information captured on calls is encrypted at rest and in transit, with full audit logging on every access.
We operate under SOC 2 Type II control mappings — access management, change management, encryption, incident response, vendor management. Documentation is available under NDA during the procurement evaluation.
All call data, transcripts, and recordings live in US-East AWS regions under SOC 2 Type II infrastructure. No data leaves the US. No data sent to foreign-hosted LLMs.
For law firm customers, calls are flagged and stored with retention rules that align with attorney-client privilege protocols. Privileged-communication handling is walked through during onboarding.
When a caller directly asks "is this AI?", the agent answers honestly. You can also configure the agent to identify itself as a virtual assistant in the opening line — your call.
Founder, infrastructure, and support all US-based. The only thing offshore is your competition's call center.
No 40-page legal PDF. What we collect, how long we keep it, who can see it.
| What we collect | Call audio, transcript, caller phone number (provided by Twilio), captured fields you configure (name, appointment time, etc.). |
| How long we keep it | Default retention: 90 days for call audio + transcripts. Configurable to 30, 60, 90 days, or indefinite per your data retention policy. |
| Who can access it | You + designated team members in your workspace. RingRouteUSA staff access requires explicit authorization for support tickets, logged in our audit trail. |
| Encryption | TLS 1.3 in transit. AES-256 at rest. Healthcare audio additionally encrypted with per-tenant keys. |
| Third-party sharing | None. We do not sell, share, or use your call data for model training. Period. |
| Compliance support | BAA available for healthcare. Custom data processing agreements available on Enterprise. Standard DPA covers most use cases. |
Need a BAA, DPA, or our SOC 2 report? Reach out — we respond within hours.
Before you trust any vendor with caller data, hear what their AI actually says on a call. Click the widget — no signup, no data captured.
Or book a 15-minute demo if you'd rather walk through your setup with a human first.
We use essential cookies to run this site, and optional analytics (Cloudflare, cookieless) to understand traffic. You choose. See our Cookie Policy and Privacy Policy.