PII redaction at the edge
Voice transcripts pass through a redaction layer before reaching the LLM or being persisted. Names, addresses, payment numbers, IDs, and dates of birth get hashed or masked at the boundary. Your guests' raw PII never sits in our logs or our prompts.
VoiceIDVault biometric
Voice prints are stored as cryptographic vectors, never raw audio. Per-tenant encryption keys. Right-to-erasure honoured at the chain layer. GDPR Article 9 explicit-consent flow at enrollment.
Tenant data isolation
Every tenant has its own RuVector RAG namespace and database tenant, and requests resolve the tenant from the signed-in session. Independent testing of tenant isolation is still to be done.
Audit trail (Viwago)
Every privileged action — booking modification, refund issuance, guest record update — logged immutably with timestamp, actor, and reason. Auditors get read-only access. Investigators get verifiable chain-of-custody.
GDPR and data processing
Voice audio is processed by providers outside the EU, so we do not claim EU-only processing. Data Processing Agreement available on request. Requests to access, correct or delete data: write to us and we answer within the legal deadline.
Secure-by-default integrations
Every PMS / POS / CRM adapter authenticates via OAuth2 or signed API keys, never passwords. Outbound calls go through a vetted MCP boundary. No third-party SDK gets raw access to your tenant database.
Compliance documentation on request
Data Processing Agreement (DPA) · Sub-processor list · DPIA for voice biometric · Architecture diagrams. VoiceCosmos holds no security certification today.
Email security@number7even.com for documentation requests. Response within 2 business days.