Security overview

Proxara hears a loan officer’s calls through its iPhone app and writes up the ones they keep. It saves no audio, and it trains no model on what it hears. The app needs nothing from the lender, and it reaches the lender’s Encompass, CRM and Microsoft 365 only once the lender’s administrators grant access.

• Where it runs: The app runs in Proxara’s own AWS, in a US region: one server with its encrypted storage, secrets and logs. Telnyx carries calls and turns them into words, and a Microsoft model reads the calls an officer keeps, in Microsoft’s US data zone. A connected install runs in Proxara’s Azure or the lender’s own.
• How data is protected: TLS 1.2 or higher in transit, and encrypted storage at rest with each call’s record sealed again under AES-⁠256. Secrets are held in AWS Secrets Manager. A Social Security number stays whole in one sealed place for 14 days, behind Face ID, and everywhere else keeps only the last four digits.
• How long it is kept: A call the officer doesn’t keep loses its words at once, or 30 minutes after it ends if they don’t answer. A kept call stays until they delete it or their account. Logs last 30 days and never hold a value from a call.

Architecture

Telnyx carries each call and turns speech into words, so Proxara gets the words and never the audio. A model reads the calls the officer keeps, and code checks every figure and decides what is written where.

Architecture lists every part and where it runs, and Every connection lists each connection it makes.

Four layers around every call

A kept call sits inside two layers of encryption, behind the officer’s own sign-in, in AWS, in a US region.

The PDF

The same two pages, to send to your IT and security lead: download the security overview. The questions they ask first are answered in Security questions.