Security & trust
How Oliver handles your team’s practice data.
A practice call means trusting us with a voice recording, a transcript, and a coaching scorecard. Here is exactly how we treat that data — in plain English, including the parts we are still building.
Last reviewed: June 2026
Our commitments
We never sell your data
We do not sell your personal information, and we never use your practice-call content to train third-party AI models without your explicit permission.
We collect the minimum
To start a practice call, we ask for a first name and email address; Business practice requires a work email. Cloudflare Turnstile runs a security check before the call. We do not create an account or ask for payment details to try Oliver.
Encrypted in transit and at rest
Every connection to Oliver runs over TLS, and your data is encrypted at rest by our infrastructure providers.
Access is scoped to your team
In a team workspace, managers see their own team’s practice activity. Personal practice on Oliver is private to the individual who ran it.
Delete on request
You can ask us to delete your contact record and practice-call data at any time by emailing our team.
Built on trusted infrastructure
Oliver runs on Cloudflare and a small set of established voice and AI providers — not a stack of unvetted tools.
Where your data lives
We share data with a small set of established providers, and only to operate the product. These are the sub-processors behind a practice call:
- CloudflareHosting, edge delivery, DNS, and bot protection (Turnstile).
- Vapi, Cartesia & OpenRouterReal-time voice transport and AI inference that run the practice call and generate transcripts and scorecards.
- HubSpotCRM for demo and contact-form submissions.
- Google Analytics 4Aggregated, privacy-conscious website analytics.
The full, legally binding detail — including how we handle international transfers and your data-protection rights — lives in our Privacy Policy.
What we’re working toward
Oliver is a young company, and we would rather be straight about where we are than imply a maturity we have not reached yet. Here is what is on our security and compliance roadmap:
- Formal security certification (such as SOC 2) as the team and customer base grow.
- Self-serve data export and deletion controls inside the product.
- Configurable retention windows for teams with stricter policies.
- Single sign-on (SSO / SAML) for business and enterprise workspaces.
- Regional data-residency options for enterprise customers.
- A signable Data Processing Agreement (DPA) on request.
Security questions, answered
Is my practice audio used to train AI models?
No. We do not use your practice-call content to train third-party large language models without your explicit permission. Audio and transcripts are processed only to produce your scorecard and run the practice experience.
Who can see my reps’ practice results?
Access is scoped to the workspace. In a team workspace, a manager can see their own team’s practice activity and scorecards. Practice run in a Personal workspace is private to the individual.
Where is my data hosted?
Oliver is hosted on Cloudflare’s global network, and our voice and AI providers operate internationally, including in the United States and the European Union. Where data is transferred across borders, we rely on our providers’ standard contractual clauses or equivalent safeguards. Regional data-residency options are on our roadmap for enterprise customers.
Can we delete our data?
Yes. You can request deletion of your contact record and practice-call data at any time by emailing hello@sayoliver.ai. Practice audio and transcripts are otherwise retained only as long as needed to deliver your scorecard, after which they are deleted or anonymised.
Is the connection encrypted?
Yes. All traffic to and from Oliver is encrypted in transit using TLS, and your data is encrypted at rest by our infrastructure providers.
Are you SOC 2 or ISO 27001 certified?
Not yet. As an early-stage company we have not completed a formal certification, and we would rather be candid about that than imply otherwise. Pursuing formal certification is on our roadmap as we grow. In the meantime, this page and our Privacy Policy set out exactly how we handle your data.
Do you sell or share our data?
We never sell your personal information. We share data only with the service providers listed above, and only to operate the product you asked for.
Have a security or compliance question?
We’re happy to walk your team through how Oliver handles data, or to share what we have toward a security review. Email hello@sayoliver.ai.