Skip to main content

Security and governance

Security, compliance, and control for AI customer work

Configure who and what an agent can act through, enforce communication decisions in the workflow, involve people when needed, and retain operational evidence for review.

Explore the platform
LimitRoles, locations, toolsEnforceConsent and channel stateInterveneTakeover and escalation
Operational governance

Controls belong inside the workflow

Governance is most useful when the operator interface and execution path agree. ID Privacy AI surfaces channel availability, human control, system events, and usage information where teams manage the work.

Communication controls

Evaluate whether a channel should be used

Outbound workflows can apply channel-specific consent, suppression, opt-out, quiet-hour, and attempt controls before a message or call proceeds. SMS programs run on registered A2P 10DLC brands and campaigns, with an AI compliance reviewer that flags risky campaign copy before submission.

  • Fail-closed consent decisions for configured SMS and voice workflows
  • A2P 10DLC brand and campaign registration with AI-assisted compliance review
  • Channel-level opt-out state and visible reasons when a channel is unavailable
Human oversight

Put a person in control when the conversation needs one

Operators can take over a conversation, pause automated responses, add handback context, and return control to the agent.

  • AI and human control state
  • Escalation queues
  • Immediate or contextual handback
Access and scope

Organize work by role, group, location, agent, and tool

Use organizational and role-aware views to separate administrative work, location operations, support access, agent configuration, and connected capabilities.

  • Role-aware administration
  • Group and location organization
  • Agent-specific tool assignment
Audit and operations

Trace the path from input to delivery

Open any message and see why the agent sent it. Inspect conversation records and processing events across intake, queues, AI requests, tool execution, retries, and delivery attempts—and when a carrier rejects a message, you see the real carrier error code, not just "sent."

  • Call summaries, recordings, and transcripts
  • Per-message decision inspection
  • Carrier-coded delivery failures with the fix
Usage governance

Make cost and consumption visible

Review supported LLM, telephony, messaging, and enrichment usage, then define alerts or limits for supported scopes.

  • Usage and cost reporting
  • Agent and organizational breakdowns
  • Alert or suspension thresholds
Knowledge and testing

Test before customer-facing deployment

Exercise configured agent behavior and tool use through text, live voice, phone, or web-copilot test paths before relying on it in production workflows.

  • Channel-aware testing
  • Live tool activity
  • Post-call analysis
Control lifecycle

Govern the workflow from design through review

Security and operating teams can use the same lifecycle to define boundaries, validate them, and monitor what happens after launch.

  1. 01

    Define scope

    Choose the locations, channels, agents, tools, data sources, and roles involved.

  2. 02

    Configure policy

    Set communication rules, task guardrails, sending identities, and escalation paths.

  3. 03

    Test behavior

    Exercise representative conversations, tool calls, failures, and human handoffs.

  4. 04

    Monitor operations

    Review outcomes, escalations, failures, delivery state, and usage as the workflow runs.

  5. 05

    Refine access and behavior

    Update agent configuration, tool assignment, policy, or limits as operational needs change.

Responsible claims

Platform controls support—not replace—your compliance program

Legal obligations depend on your use case, customer relationship, jurisdiction, content, providers, and operating procedures.

Configuration matters

Controls must be configured for the channels, purposes, contacts, and locations in your deployment.

Evidence matters

Consent provenance, communication records, event traces, and operator actions help teams review what occurred.

Legal review remains yours

Your counsel and compliance team should approve policies and customer communications for the intended use.

Scope note: This page describes product capabilities and is not a certification, legal opinion, or guarantee of compliance.

Related

Put controls around a concrete workflow

Security review

Evaluate the controls against your deployment

We will walk through roles, channels, tools, consent decisions, human intervention, traces, and usage governance for the workflow you are considering.

See the platform