Clear Data Practices.Built on Transparency.

Executive Trust Summary

VisQuanta is built for businesses that handle customer conversations, lead records, appointment data, CRM-connected workflows, SMS outreach, and voice activity at scale.

Our trust model is based on five principles: collect only what is needed, keep customer data inside controlled workflows, minimize what is sent to AI providers, maintain clear consent and opt-out controls, and provide audit visibility for messaging, voice, and CRM activity.

We support customers with documented controls across AI data handling, SMS compliance, data minimization, access control, subprocessor review, and security documentation. Customers remain responsible for their own campaign configuration, consent sources, message content, legal review, and customer relationship decisions.

Trust Principles & Control Pillars

Policies

Core policy documents and compliance materials for VisQuanta customers and their legal teams.

Data Processing Agreements

We can support enterprise customers and vendor review teams with appropriate data-processing documentation, including a customer-facing Data Processing Addendum where required.

Where our service providers process personal data on our behalf, we require appropriate contractual protections, such as a Data Processing Addendum or equivalent data-processing terms.

Shared Responsibility Model

VisQuanta provides the platform, controls, workflow infrastructure, and audit visibility used to operate SMS, voice, CRM, and AI-assisted communication workflows.

Our customers remain responsible for deciding who they contact, why they are contacted, what consent basis applies, what campaign language is used, and whether a particular campaign is appropriate for their business, jurisdiction, and customer relationship.

VisQuanta helps support responsible operation through configurable controls such as opt-out detection, suppression checks, consent capture, quiet-hours configuration, role-based access, audit logs, AI data minimization, and workflow-level guardrails.

Enterprise AI Data Controls

VisQuanta uses enterprise-grade AI model infrastructure for supported messaging, voice, and workflow automation use cases.

For eligible enterprise AI workflows, customer content is not used to train model-provider systems by default. Where configured and supported, Zero Data Retention controls can be applied so eligible customer content is excluded from model-provider abuse monitoring logs.

AI data controls are applied based on the workflow, endpoint, model capability, feature set, and customer deployment configuration. Some files, images, tool calls, application state, third-party integrations, or non-AI systems may have separate retention behavior.

Because of this, VisQuanta designs each deployment to minimize the data sent to AI providers and to avoid sending unnecessary CRM fields, sensitive personal information, or full customer records where they are not required.

For SMS conversational agents, OpenAI processes conversations under a Zero Data Retention agreement. See where customer texts go and how long each system keeps them.

What We Send to AI Providers

For standard SMS campaign workflows, VisQuanta minimizes the data sent to AI model providers. The default configuration is designed to pass only the conversation context required to generate a useful response, such as the prospect's first name, the messages they provide, and limited workflow instructions required for the campaign.

We do not intentionally send full CRM records, unnecessary contact fields, payment information, government identifiers, financial account data, or sensitive personal information to AI model providers.

Lead routing, dialing, CRM storage, consent records, suppression records, customer account administration, and operational reporting occur outside the AI model layer.

Data Minimization & PII Redaction

For supported SMS workflows, messages pass through a redaction layer designed to detect and replace regulated personal data before downstream storage, CRM sync, or AI processing.

This redaction layer is designed to identify data types such as Social Security numbers, credit and debit card numbers, bank account numbers, routing numbers, driver's license numbers, and dates of birth. When a redaction event occurs, the platform records the type and count of the redaction for audit purposes without retaining the original regulated value.

Ordinary business conversation context, such as names, vehicle details, appointment information, prices, mileage, and general inquiry details, may be preserved where needed to keep the workflow useful for the customer.

US & Canadian Messaging Compliance Support

VisQuanta supports business-operated SMS and voice workflows across the United States and Canada.

Our platform is designed to support responsible messaging operations through consent visibility, sender identification, opt-out handling, suppression controls, quiet-hours configuration, campaign-specific disclosures, and audit records.

Consent Evidence & Audit Trail

VisQuanta is designed to preserve evidence around how communication workflows were configured and operated.

Where consent is captured through supported VisQuanta forms or workflows, the platform can record the disclosure text shown to the consumer, timestamp, IP address, user agent, consented channels, linked policy URLs, and related submission metadata.

Operational audit records may include opt-out events, suppression decisions, blocked sends, redaction events, delivery status, call recording configuration, and workflow activity. These records help customers review how a campaign was configured and how platform controls were applied.

Security Posture

VisQuanta applies technical and organizational controls designed to protect customer workflows, platform access, and operational data.

Subprocessors & Service Providers

VisQuanta relies on a small set of vetted infrastructure, AI, messaging, and CRM service providers to operate the platform. The summary below describes the categories and what types of data are typically processed by each.

We rely on a small set of vetted sub-processors to operate our platform, process AI requests, and deliver messaging. Documentation for any specific vendor is available on request: compliance@visquanta.com. See the full subprocessor list.

Security & Compliance Documentation

Enterprise customers, dealership groups, and vendor review teams can request supporting documentation where appropriate.

DPA Requests & Compliance Questions

For DPA requests, vendor review, security questionnaires, privacy questions, AI data handling reviews, or subprocessor documentation, contact: