Security Overview

Last updated: 14 September 2026

Infrastructure

SvaraCall’s production platform runs on hardened, containerised infrastructure with network segmentation, automated patching, and TLS termination at the edge. Administrative access requires multi-factor authentication.

Encryption & access

Traffic between your browser and SvaraCall is encrypted in transit (TLS 1.2+).
Authentication sessions are signed and HTTP-only; passwords are hashed with modern algorithms.
Payment card data is handled by our payment gateway; SvaraCall does not store full card numbers.
Internal admin actions on customer data are logged and reviewed.

Sub-processors

Third parties that process data to deliver the Service are listed on our Subprocessor List, which forms part of the Privacy Policy and Data Processing Addendum.

Reliability & failover

Voice calls depend on redundant paths for speech recognition, conversation AI, and speech synthesis. If a provider degrades, traffic fails over to alternate endpoints where configured. Real-time telephony may still be subject to carrier outages beyond our control.

Call recordings

When enabled, recordings are stored encrypted at rest with access restricted to authorised account roles. Retention follows your account settings and our Privacy Policy.

Incident response

We maintain an incident-response runbook. If we confirm unauthorised access to personal data, we will notify affected account holders within 72 hours of confirmation where required by law, and coordinate with you regarding end-caller notification.

Reporting a vulnerability

If you discover a security issue, please report it responsibly to privacy@sarwagyna.com. Include steps to reproduce and avoid public disclosure until we acknowledge receipt.