Clear Data Practices.
Built on Transparency.

VisQuanta helps businesses operate customer communication workflows with clear data handling, AI processing controls, consent visibility, and audit-ready compliance practices across SMS, voice, CRM, and automation.

Last updated: May 2026

Executive Trust Summary

VisQuanta is built for businesses that handle customer conversations, lead records, appointment data, CRM-connected workflows, SMS outreach, and voice activity at scale.

Our trust model is based on five principles: collect only what is needed, keep customer data inside controlled workflows, minimise what is sent to AI providers, maintain clear consent and opt-out controls, and provide audit visibility for messaging, voice, and CRM activity.

We support customers with documented controls across AI data handling, SMS compliance, data minimisation, access control, subprocessor review, and security documentation. Customers remain responsible for their own campaign configuration, consent sources, message content, legal review, and customer relationship decisions.

Trust Principles & Control Pillars

Data Minimisation

We design workflows to collect and process only the information needed to deliver the configured service.

AI Data Controls

AI workflows are configured to minimise the data sent to model providers and apply enterprise controls where available.

Consent & Opt-Out Handling

Supported workflows include consent visibility, opt-out detection, suppression checks, and campaign-specific messaging controls.

CRM & Workflow Security

Customer records, workflow activity, and integrations are managed through controlled systems with role-based access and audit visibility.

Audit Readiness

We preserve operational records that help customers review consent events, opt-outs, blocked sends, redactions, and workflow activity.

Data Processing Agreements

We can support enterprise customers and vendor review teams with appropriate data-processing documentation, including a customer-facing Data Processing Addendum where required.

Where our service providers process personal data on our behalf, we require appropriate contractual protections, such as a Data Processing Addendum or equivalent data-processing terms.

Shared Responsibility Model

VisQuanta provides the platform, controls, workflow infrastructure, and audit visibility used to operate SMS, voice, CRM, and AI-assisted communication workflows.

Our customers remain responsible for deciding who they contact, why they are contacted, what consent basis applies, what campaign language is used, and whether a particular campaign is appropriate for their business, jurisdiction, and customer relationship.

VisQuanta helps support responsible operation through configurable controls such as opt-out detection, suppression checks, consent capture, quiet-hours configuration, role-based access, audit logs, AI data minimisation, and workflow-level guardrails.

VisQuanta provides

  • Platform, workflow infrastructure, and audit visibility
  • Configurable consent, opt-out, and suppression controls
  • AI data minimisation and workflow-level guardrails
  • Role-based access and operational audit logs

Customer remains responsible for

  • Who they contact and why
  • Consent basis and consent source
  • Campaign language and message content
  • Legal review for their jurisdiction and customer base

Enterprise AI Data Controls

VisQuanta uses enterprise-grade AI model infrastructure for supported messaging, voice, and workflow automation use cases.

For eligible enterprise AI workflows, customer content is not used to train model-provider systems by default. Where configured and supported, Zero Data Retention controls can be applied so eligible customer content is excluded from model-provider abuse monitoring logs.

AI data controls are applied based on the workflow, endpoint, model capability, feature set, and customer deployment configuration. Some files, images, tool calls, application state, third-party integrations, or non-AI systems may have separate retention behaviour.

Because of this, VisQuanta designs each deployment to minimise the data sent to AI providers and to avoid sending unnecessary CRM fields, sensitive personal information, or full customer records where they are not required.

Important

ZDR and regional processing controls are workflow and endpoint dependent. They should not be described as applying automatically to every system, feature, or integration.

What We Send to AI Providers

For standard SMS campaign workflows, VisQuanta minimises the data sent to AI model providers. The default configuration is designed to pass only the conversation context required to generate a useful response, such as the prospect's first name, the messages they provide, and limited workflow instructions required for the campaign.

We do not intentionally send full CRM records, unnecessary contact fields, payment information, government identifiers, financial account data, or sensitive personal information to AI model providers.

Lead routing, dialing, CRM storage, consent records, suppression records, customer account administration, and operational reporting occur outside the AI model layer.

Examples of data we avoid sending where not required

  • ×Full CRM records
  • ×Payment information
  • ×Government identifiers
  • ×Financial account data
  • ×Sensitive personal information
  • ×Internal customer notes not required for the workflow
  • ×Unnecessary contact fields
  • ×Full lead history where limited context is sufficient

Data Minimisation & PII Redaction

For supported SMS workflows, messages pass through a redaction layer designed to detect and replace regulated personal data before downstream storage, CRM sync, or AI processing.

This redaction layer is designed to identify data types such as Social Security numbers, credit and debit card numbers, bank account numbers, routing numbers, driver's license numbers, and dates of birth. When a redaction event occurs, the platform records the type and count of the redaction for audit purposes without retaining the original regulated value.

Ordinary business conversation context, such as names, vehicle details, appointment information, prices, mileage, and general enquiry details, may be preserved where needed to keep the workflow useful for the customer.

US & Canadian Messaging Compliance Support

VisQuanta supports business-operated SMS and voice workflows across the United States and Canada.

Our platform is designed to support responsible messaging operations through consent visibility, sender identification, opt-out handling, suppression controls, quiet-hours configuration, campaign-specific disclosures, and audit records.

United States — TCPA-aware
  • Consent review and capture
  • Opt-out handling
  • Do Not Contact suppression
  • Contact cadence controls
  • Call & text auditability
Canada — CASL-aware
  • Evidence of consent
  • Sender identification in messages
  • Unsubscribe mechanisms in communications
  • Suppression and opt-out logging

VisQuanta does not replace legal counsel. Customers remain responsible for confirming that their campaigns, consent sources, message content, and operating procedures meet the requirements that apply to their business.

Security Posture

VisQuanta applies technical and organisational controls designed to protect customer workflows, platform access, and operational data.

Controls may include

  • Encryption in transit using TLS
  • Encryption at rest where supported by infrastructure providers
  • Role-based access control
  • Limited internal access based on operational need
  • Environment-level access controls
  • Audit logging for key operational events
  • Secure integration handling
  • Internal incident escalation procedures
  • Subprocessor review for key infrastructure providers

VisQuanta does not currently claim to hold its own SOC 2 or ISO 27001 certification. We rely on vetted infrastructure and service providers with established security programs while maintaining internal policies, operational controls, and customer-facing documentation appropriate to our current stage.

Subprocessors & Service Providers

VisQuanta relies on a small set of vetted infrastructure, AI, messaging, and CRM service providers to operate the platform. The summary below describes the categories and what types of data are typically processed by each.

Provider Category
AI model providers
PurposeGenerate AI-assisted responses and workflow outputs
Example DataLimited conversation context and workflow instructions
Cloud hosting providers
PurposeHost application services and infrastructure
Example DataApplication traffic, logs, and platform data
Database providers
PurposeStore platform records and workflow data
Example DataCustomer records, message metadata, audit records
Messaging and voice providers
PurposeSend SMS, route calls, manage phone numbers
Example DataPhone numbers, message/call metadata, delivery status
CRM and integration providers
PurposeSync records into customer systems
Example DataLead records, conversation summaries, appointment data
Analytics and monitoring providers
PurposeMonitor site and platform performance
Example DataUsage events, diagnostics, error logs
View full subprocessor list

Security & Compliance Documentation

Enterprise customers, dealership groups, and vendor review teams can request supporting documentation where appropriate.

Available materials may include

  • Data Processing Addendum
  • Subprocessor list
  • Security controls summary
  • SMS PII handling policy
  • Access control policy
  • Incident response overview
  • AI data handling summary
  • Messaging compliance controls summary
  • Vendor/security questionnaire responses

Certain documents may be provided under NDA or as part of an enterprise onboarding process.

DPA Requests & Compliance Questions

For DPA requests, vendor review, security questionnaires, privacy questions, AI data handling reviews, or subprocessor documentation, contact:

Trust Centre — VisQuanta | VisQuanta