Data Security Policy

Auvelos LLC ("LeadUp") applies technical and organizational measures designed to protect the confidentiality, integrity, and availability of the data we process. This page summarizes our practices; it is not a warranty and our controls evolve as the service and threat landscape change.

• In transit — traffic to our website, dashboard, and APIs is encrypted using TLS. Call media is carried over our telephony provider's secure transport.
• At rest — data stored in our cloud databases and storage is encrypted at rest.

• Dashboard access requires an account and authenticated session.
• Passwords are stored only as salted hashes, never in plaintext.
• Internal access to systems and data follows least-privilege principles and is limited to personnel who need it.

The service runs on Amazon Web Services (AWS). We rely on AWS's physical and network security and configure our environment to isolate workloads and restrict access. AI processing (speech-to-text, language model, text-to-speech) runs within our cloud environment.

We log operational events to detect and investigate issues and security events. Access to logs is restricted, and we work to minimize sensitive content in logs.

We use a limited set of vetted sub-processors (e.g. AWS, Twilio, Stripe) bound by contractual data-protection and confidentiality obligations. See our Privacy Policy for the current list.

We maintain procedures to respond to security incidents. In the event of a personal data breach, we will notify affected customers and, where required, regulators and data subjects, in line with applicable law and our agreements.

For HIPAA-covered customers, LeadUp acts as a Business Associate under a signed Business Associate Agreement and applies the administrative, physical, and technical safeguards required to handle protected health information (PHI).

• Keep your account credentials confidential and use a strong, unique password.
• Manage who in your organization has access to your account.
• Notify us promptly if you suspect unauthorized access.

If you believe you have found a security vulnerability, please contact us at info@auvelos.com. We appreciate responsible disclosure and will work with you to investigate and address valid reports.