Security & privacy
Privacy built in, not bolted on.
Hosting and storage in the EU, encrypted credentials, roles with two-factor sign-in, recording only with consent – and an agent that identifies itself as an AI.
Infrastructure
Your data stays in the EU
Designed around the requirements of the GDPR and KVKK.
EU hosting
The platform runs on servers in the EU.
EU storage
Recordings and files are kept in EU storage via Cloudflare R2.
Encrypted credentials
Credentials for your systems encrypted with AES-256-GCM, API keys only as hashes.
Bring your own keys
If you wish, use your own keys for speech and AI providers.
Recording
Recording only with consent
The agent announces the recording at the start. You decide how long recordings are kept – and transcripts can be redacted after a period.
- Recording notice in the greeting
- Retention of 30, 90, 180 or 365 days
- Transcript redaction after a period
- Consent can be required per campaign
Access
You decide who can do what
Five standard roles, custom roles and per-person permissions. Two-factor authentication can be required for everyone, and single sign-on runs through Google Workspace or Microsoft Entra.
- Owner, admin, supervisor, QA, member
- Custom roles and individual permissions
- Two-factor authentication with recovery codes
- Single sign-on, exclusively if you wish
Transparency
Fair to the people on the other end
Good campaigns respect the people they call. Fonce makes that the default.
- The agent identifies itself as a digital assistant at the start
- Your own legal opening text per campaign
- Opt-outs are detected and blocked immediately
- Calls only within your time windows
- Only your own verified numbers
- Data processing agreement under Art. 28 GDPR
FAQ
Frequently asked questions
Do you sign a data processing agreement?
Yes, we sign a data processing agreement with you under Art. 28 GDPR.
Where are recordings stored?
In EU storage via Cloudflare R2. You set the retention period yourself.
Is there two-factor sign-in?
Yes, with an authenticator app and recovery codes – required for everyone if you wish. Alternatively single sign-on via Google Workspace or Microsoft Entra.
Hear for yourself how Fonce handles a call.
In a personal demo, we’ll show you the agent with a call script from your industry – and answer your questions about campaigns, integrations and data protection.