Security
Security at Teleperson.
We're building consumer trust into a product that touches banking, support, and AI. The bar is "designed for the regulator, not just the user." Your agent works for you — your data is never the product.
- SOC 2-aligned
- HIPAA-aligned
- AES-256 encrypted
- Audit-logged
Key takeaways
- Teleperson's security posture is SOC 2-aligned and HIPAA-aligned. It holds no third-party attestation today — the controls are in place, the external audit is not yet done.
- A BAA is available for healthcare deployments.
- Bank connection tokens are encrypted at rest with AES-256-GCM, and every connection is TLS in transit.
- Every Postgres table is row-level-security enforced, so one tenant can never read another tenant's rows.
- Every privileged action — claims, admin overrides, billing changes, white-label tenant changes — is audit-logged with operator and target attribution.
- The agent operates under single-step authority: binding actions need an explicit user confirmation gated by a watcher classifier, never model discretion alone.
Security posture
Encryption at rest
Bank connection tokens are encrypted with AES-256-GCM. TLS in transit on every connection.
Row-level security
Every Postgres table is RLS-enforced; tenants and users can only ever read their own rows. Backed by Supabase's RLS engine.
Bank credentials never touch us
Bank and card sign-in happens on the bank’s own secure page through a regulated connection partner, so Teleperson never sees a bank password. Atlas keeps call history, transcripts and notes on your Mac.
Audit logs
Every privileged action: claims, admin overrides, billing changes, white-label tenant changes, is audit-logged with operator and target.
AI safety
Single-step authority. Watcher-classified autonomy.
Actions that would bind you (cancellations, payment changes, contract changes) require an explicit confirmation gated by a watcher classifier. Atlas always tells the company it’s an AI, never enters payment details, and hands you the line whenever you want it.
Privacy by design
Transcripts stay on the device by default.
Atlas keeps call history, transcripts, notes and your home address on your Mac. Bank and card sign-in happens on your bank’s own secure page. We never sell user data; we never share it with third parties outside of the integrations the user explicitly enables.
Security FAQ
Security questions, answered
Questions about our security posture?
We respond to security disclosures within one business day.