Security and privacy

We don't sell or share your data, and we don't use your calls, transcripts or deals to train AI models. Our AI provider works under terms that don't allow training on it either.

All traffic uses HTTPS (TLS 1.2+), enforced by the browser. Data is encrypted at rest, and sign-in tokens for your connected tools (Google, Microsoft, Zoom and others) get an extra layer of AES-256 encryption in our database.

Every request is checked against the signed-in person's team, so one company can never see another's data. Inside your team, leaders choose who can see which deals.

Two-step verification with an authenticator app, which a team owner can require for everyone. Sign in with your company Microsoft or Google account. Repeated wrong passwords lock sign-in for 15 minutes.

Your team owner can download all of your company's data at any time, see who has which tools connected, sign anyone out everywhere, and remove people. You can ask us to permanently delete your data at any time.

Daily encrypted backups are stored separately from the live service. Deleted deals go to a recoverable trash. If you cancel, your data is kept, so you can pick up where you left off.

When Anchor.AI's notetaker joins a call, it tells everyone in the meeting chat that the call is being recorded. Recording copies held by our recording and transcription providers are deleted once Anchor.AI has saved its own.

All code changes are reviewed and automatically checked. Dependencies are scanned for vulnerabilities on every change and weekly. Every administrative account uses multi-factor authentication. Security incidents are handled under a written plan, and affected customers are told within 72 hours.