Security and compliance

Security and protection of your call data

A call contains personal information: a name, a number, an address, sometimes sensitive details. Here is how Zenicall protects it, whatever your sector.

In short

Zenicall hosts call data in Canada, encrypts it, restricts dashboard access with two-factor authentication and acts as a service provider to your organization. Your organization remains responsible for its customers' personal information, and Zenicall is designed to fit its obligations under Quebec's Law 25.

The measures in place

Hosting in Canada

Data passing through Zenicall is hosted in Canada, in certified data centres. It remains subject to Canadian and Quebec law.

Encryption

Communications and data are encrypted, both in transit and at rest.

Controlled access

Dashboard access requires two-factor authentication. Roles and permissions determine who sees what, and actions are logged.

Law 25

The service is designed to fit your obligations: collection limited to what the call requires, access and correction rights, handling of confidentiality incidents.

Who is responsible for what

Your organization

It is responsible for its customers' personal information. It decides what information is collected during calls and how it is used.

Zenicall

Zenicall acts as a service provider: we process the information on your behalf, according to your instructions, and protect it with the measures described on this page.

Questions to ask any provider

Whether you choose Zenicall or another solution, these questions deserve a written answer before you hand over your calls. We answer them during the demo.

  • In which country are recordings, transcripts and summaries hosted?
  • Which subcontractors process the calls, and where are they located?
  • How long are recordings and transcripts kept, and can I have them deleted?
  • How will I be notified of a confidentiality incident?
  • Who at the provider can access my data, and how is that access controlled?

This page describes Zenicall's security measures; it is not legal advice on your own obligations.

Security FAQ

Where is call data hosted?
Data passing through Zenicall is hosted in Canada, in certified data centres.
Is the data encrypted?
Yes. Communications and data are encrypted, both in transit and at rest.
Who is responsible for the personal information collected during calls?
Your organization remains responsible for its customers' personal information. Zenicall acts as a service provider and processes that information on your behalf, according to your instructions.
Is Zenicall compliant with Law 25?
Zenicall is designed to fit your organization's obligations under Quebec's Law 25. Compliance, however, is assessed at the organization responsible for the information, which documents its own approach; we answer its questions to help.

Questions about protecting your data?

Ask them during a demo: we'll answer in writing.