For IT and security
The contact center from an IT and security perspective
Your IT team gets a system that doesn't add to its workload, and your security team gets to review it before launch. Nothing is installed on employee computers – a browser is enough – and we handle versions and backups. Run the system in our US and UK data centers, on your own Linux servers, or split between the two. Employees sign in with corporate accounts, recordings are stored encrypted, and the audit log and detailed logs show every action, down to who played a recording. Your own applications control calls and outbound campaigns through the API.
TelephonyAsteriskopen sourceCall entry pointFreeSWITCHoptionalServersRocky Linuxor another LinuxWorkstationsbrowserno installationChallenges
What worries IT and security when choosing a system
Solution
What changes for IT and security
Hosting
Data stays where it's allowed to be
Run the system in our data centers in the US and the UK, on your servers, or in a mixed setup – for example, the system with us and recordings stored by your IT team. When you host it yourself, your company is responsible for the personal data.
- US and UK data centers
- Your environment
- Hybrid
PlatformCONTACT.WORK cloudNew YorkRecordingscompany serverin your networkAIclouduntil GPUs are boughtStaffone systemusers don't see the splitAccess
Right permissions for each role, every action visible
Permissions are assigned by job role, and sign-in can go through Active Directory with a second verification step. The audit log records every action, including listening to calls, and a departing employee is disabled in one place.
- Roles
- Two-factor authentication
- Audit log
Logintwo-stepfor all rolesRoles12fit to your org chartAccountsfrom Active Directorydisable in one placeLogall actionswho, what, whenConnections
The system fits into what already works
Connect any application to the platform through the API: your CRM, ERP, or in-house software. Each system gets its own key, revoking one doesn't affect the others, and calls to customers start right from your corporate software.
- API
- Keys
- Your own apps
CRMBitrix24on-premisesAccounting1Ccustomer dataCustom appscalls via APIone key per systemKeyrevokedothers keep workingReliability
A server failure doesn't stop the line
We handle backups and updates. If you order a standby, a backup server or site takes over when a server or the whole site fails, and if the office loses internet, calls go to mobile phones.
- Backups
- Standby server
- Mobiles
Last backuptoday, 3:00 AMtaken by us on scheduleStandby serverreadytakes over the loadUpdateinstalledovernightOffice internet downcalls go to mobilesautomaticallyReviews
Security gets answers up front
Documents for reviewers – the data flow diagram and how the deployment is built – are ready in advance, and we answer your security team's questions. Calls and recordings are encrypted, the platform undergoes penetration testing, and your company decides how long to keep recordings.
- Data flow diagram
- Questionnaire
- Retention period
Data diagramreadybefore launchEncryptioncalls and recordingsSRTP, TLS, disksPenetration testsregularlyand vulnerability scansAudio retentionset by youper your policiesExamples
Everyday IT and security tasks
What happens at launch and in daily work – and how we handle it.
Installation
Internal policy doesn't allow recordings to leave the company. IT sets up two Rocky Linux virtual machines, and we do the rest: install the system, set up the numbers, and run a pilot shift with your people. Five days later the line is live, and recordings never leave the company.
- Rocky Linux
- Numbers
- Pilot shift
Servers2 virtual machinesRocky LinuxPlatformdeployedday 2Numbersconnectedday 3Pilot shiftin progressday 5Investigation
A customer complains that outsiders learned about their order. Security pulls the platform's detailed logs, which show who opened the customer record, listened to the call, or exported data, down to the minute. Instead of suspecting the whole department, you get specific people and facts.
- Logs
- Audit log
- Exact time
Recordopened 3 times2 staffConversationlistened to2:20 PM, supervisorExportsnonein 30 daysSummarynarrowed downto 2 peopleIntegration
The company has its own order system, and switching between windows slows employees down. We connect it to the platform through the API: the call to a customer starts right from the order record, and the recording and outcome tag are saved there too. CRMs, accounting systems, and any other software with an API connect the same way.
- API
- Your software
- Outcome in your system
Systemin-house, orderson the company networkCallfrom the order recordwith one clickKeyseparatefor this systemCall outcomein the orderrecording and outcomeAccess
A manager leaves the company. IT disables their Active Directory account, and platform access is revoked along with every other system. They can no longer reach recordings or customer data, and the logs of everything they did stay available for review.
- Active Directory
- Access revoked
- Logs
Accountlockedin Active DirectoryPlatform loginfilledat 6:02 PMRecordingsunavailableright awayLogssavedall their actionsYou decide where the system runs and who can access what.
Features
More on hosting, security, and support
Hosting, security, connections, and ongoing support.
Hosting
- Our cloudHosted in our data centers in the US and the UK; the first 50 GB of recordings are included in hosting.
- Your own serversRocky Linux on bare metal or virtual machines, live in less than a week.
- HybridAny split between the cloud and your servers.
- Standby serverOptional; costs the same as the primary and takes over the load on failure.
- Switch optionsMove from the cloud to your own hardware and back, along with settings and recordings.
- AI on your hardwareBuy a GPU, and you can move speech recognition and AI agents in-house.
- Backup siteIf one site goes down, the second takes over the load automatically.
- Grow without rebuildingWhen headcount grows, add servers – no need to redo the deployment.
- Database failure toleranceCustomers still get through even if the database is temporarily unavailable.
- Cloud statusA dedicated page shows how the cloud is running and whether there were outages – no need to call support.
Security
- Two-factor authenticationA stolen password isn't enough: every role requires a second sign-in step.
- Audit logWho opened recordings, reports, and customer records, and what they changed.
- Roles that match your orgWe add custom roles as part of ongoing support.
- Hidden contact detailsThe customer's phone number and email are hidden from employees who don't need them.
- Screen recordingBesides audio, the employee's screen is recorded, so a disputed case can be reviewed in full.
- Retention periodYou decide when old recordings are deleted, based on your own policies.
- Detailed logsThe platform logs every process, so you can reconstruct what was done, when, and by whom.
- Single sign-onAccounts come from Active Directory, LDAP, or SAML – a departing employee loses access to every system at once.
- Voice encryptionCalls can't be intercepted in transit: they travel over the secure SRTP and TLS protocols.
- Encrypted recordings at restEven with a copy of the disk, recordings can't be played: audio is stored encrypted.
- Keys stay with youYou control the encryption keys for recordings, not the vendor.
- Pause for paymentsRecording stops while the customer reads out a card number, which makes PCI DSS requirements easier to meet.
- Redacted transcriptsCard numbers, ID numbers, and similar details are removed before text goes to AI.
- Number blocklistSpam is stopped before the queue, so agents don't waste time on it.
- Security testingThe platform undergoes regular penetration testing and vulnerability scanning.
Connections
- APIYour software places calls, starts outbound campaigns, and reads data automatically.
- One key per systemAccess for one application is revoked separately from the others.
- Bitrix24 and Kommo (amoCRM)Cloud and on-premises editions, without their built-in telephony.
- Salesforce, Dynamics 365, SuiteCRMConnected through the API, so call outcomes are saved to your CRM.
- Separate tracksAgent and caller audio are recorded on two separate channels – speech analytics requires this.
- Asterisk and FreeSWITCHBuilt on Asterisk, with FreeSWITCH in front of it if you want.
- NumbersLocal and toll-free numbers are ordered from your carrier.
- Secure APIApplications authenticate with OAuth 2.0, and rate limits keep any one of them from overloading the system.
Ongoing support
- UpdatesWe install them ourselves, without your administrators.
- BackupsWe take them ourselves; if the system runs on your side, backups stay on your hardware.
- 30-minute responseResponse time on our two top support plans.
- 24/7Night and weekend support hours are billed at double the rate.
- Included hoursMonthly: Pro includes 16 engineer hours, Maxi includes 40.
- Leave without lossesIf you decide to leave, you take all recordings and customer data with you.
- DocumentationModule documentation lets you run the system yourself or with an integrator.
Modules
What IT gets
Launch
How we launch
- 01RequirementsWe review your security requirements, where and for how long data must be stored, and which applications need to connect. These determine where the platform will run.
- 02ArchitectureWe choose the hosting option, size the machines to your headcount, and document the data flow – this document goes to your approvers.
- 03InstallationYour administrators prepare the machines (Rocky Linux), and we install the platform and set up numbers – usually in less than a week. Porting existing numbers takes longer: your carrier handles it.
- 04IntegrationsWe connect your CRM, ERP, and in-house software to the platform, issue access keys, and set up roles and two-factor authentication.
- 05Ongoing supportFrom there we keep versions and backups current and respond to requests within your support plan's response times. Engineering work is covered by your plan.
Preparation
What to decide in advance
Q&A
Frequently asked questions
Where is data stored in the cloud?
The cloud version runs in our data centers in the US and the UK. If you install the system on your own hardware, everything stays with you, and your company is responsible for the data under the laws that apply to you.
What servers do we need?
Machines running Rocky Linux (other Linux distributions work too), physical or virtual. The number grows with headcount: one for up to 10 agents, four for up to 200, and custom sizing beyond that.
Do we need to install software on computers?
No. A standard browser is enough, and a phone works too.
How do we investigate a security incident?
With the platform's detailed logs and the audit log: they show which employee opened, listened to, or changed information, down to the minute.
How is sign-in protected?
With two-factor authentication, no exceptions for any role. Accounts can sync from your corporate directory, and user actions are saved in the audit log.
Can our in-house system connect?
We'll connect it: it gets its own API key, and calls start right from its window.
Who handles versions and backups?
Our team: we install new versions and take the backups.
What happens if a server fails?
A standby machine or a second site takes over the load if you have one set up; if the office loses internet, calls go to mobile phones.
How much do seat licenses cost?
There are none. You pay only for engineering support under your chosen plan, plus hosting if the system runs with us.
How are calls and recordings encrypted?
Calls travel over SRTP and TLS, and recordings are stored encrypted, with the keys under your control.
What do we take with us if we end the contract?
The full recording archive and customer history – we keep nothing back.
Glossary
Terms on this page
- Encryption
- Encrypted data can't be read without the key. Learn more →
- API (application programming interface)
- The way programs exchange data with each other without a person in the loop. Learn more →
- Backup
- Data is regularly copied to a separate place so it can be restored if something goes wrong. Learn more →
- Cloud deployment (cloud)
- The platform runs on the vendor's servers, and agents connect over the internet. Learn more →
- Hosting
- You rent a server from a provider instead of buying one. Learn more →
- Data center
- A building with servers, backup power, cooling, and network links. Learn more →
- CRM – customer relationship management
- Where a company keeps its customers, deals, and full communication history. Learn more →
- Hybrid deployment
- Part of the system runs on the company's servers, part in the vendor's cloud. Learn more →
- On-premises deployment
- The system runs on the company's own servers, not in the vendor's cloud. Learn more →
- ERP – enterprise resource planning
- Orders, inventory, and finance in one system. Learn more →
- Virtual server
- A software-defined machine that shares hardware with others. Learn more →
- Customer record
- The screen of customer data an agent sees during a conversation. Learn more →
- Personal data
- Anything that points to a specific person: a name, a number, a voice. Learn more →
- Speech-to-text
- Turns spoken conversation into text. Learn more →
- Dual-channel recording
- Each speaker is recorded on a separate track. Learn more →
- Speech analytics
- The system analyzes recorded calls automatically: topics, script adherence, customer emotions. Learn more →
- Call recording
- Calls are saved so they can be replayed and disputes settled. Learn more →
Updated: