Protect callers, clients and your platform

Apply the checklist: AI and recording disclosure; consent and DND checks before every outbound call; personal data masked in logs and deleted after the retention period; recordings encrypted with limited access; per-client API keys and webhook signatures; prompt-injection defence (callers cannot change rules or trigger actions outside the tools); sensitive actions (payments, account changes) always transferred to a human; audit log of config changes.