Security and data protection
Voko answers the phone for your business. What your callers say belongs to you: Voko processes it for you, by your settings, and never for any other purpose. Your data is never used to train AI models.
Voko’s database is in Zurich and the application runs in Frankfurt. Voice, the language model and telephony are processed by the providers below, including in the United States. We do not claim to host everything in Switzerland.
Providers
Every provider that processes your callers’ data, what it does, where, and the legal basis the transfer rests on.
| Provider | Role | Where | Transfer basis |
|---|---|---|---|
| ElevenLabs | Speech recognition and synthesis, running the call, transcript | Per the provider, including the United States | Swiss-U.S. Data Privacy Framework |
| Google LLC | Language model (Gemini) | Per the provider, including the United States | Swiss-U.S. Data Privacy Framework |
| Twilio | Numbers, call routing, SMS | Per the provider, including the United States | Swiss-U.S. Data Privacy Framework |
| Supabase | Database, accounts and voicemails kept in Voko | Zurich | Standard contractual clauses |
| Vercel | Running the application | Frankfurt | Swiss-U.S. Data Privacy Framework |
| Resend | Sending the emails after calls | Per the provider, including the United States | Standard contractual clauses |
| Jina AI | Reading your public website during setup | European Union | Country recognised as adequate |
How long data is kept
- Caller’s number, summary, reason
- The delay you choose per assistant: 1, 7, 30 or 90 days, or no automatic deletion. 30 days by default.
- Transcript
- The same delay. In zero retention mode it is not kept at all.
- Audio recording
- Off by default. When on, the assistant announces it at the start of every call, and it follows the same delay.
- Voicemail outside opening hours
- Emailed and then deleted at the carrier, or kept in Voko with the same delay, as you choose.
- Date, duration, billed minutes
- For as long as the account exists, so every invoice stays explicable.
What you control
- Each assistant’s deletion delay, and a zero retention mode.
- Audio recording, off by default.
- Deleting a call yourself: transcript, recording, summary and number.
- Keeping voicemails in Voko rather than in your email inbox.
- For a healthcare practice: medical confidentiality applied by the assistant, and summaries without health details.
- Two-step sign-in, and roles: a viewer cannot change or delete anything.
- Exporting all your data, and deleting your account.
- Signed webhooks and bookings your system can verify.
Data processing agreement and questions
A data processing agreement under Art. 9 FADP is available on request. For any question about your data: hello@voko.ch.