VoiceSteer Security & Data Architecture

1. Security Overview

VoiceSteer is designed to provide real-time sales coaching during live customer calls without requiring a full meeting-video archive for its coaching workflow. We prioritize minimal context capture, account-scoped playbook retrieval, and auditable session control.

2. Account and Session Controls

All access to the VoiceSteer application requires authenticated user sessions. User identity is established via server-side session tokens, protecting account actions, playbook management, and billing management.

3. Extension Connection Controls

The VoiceSteer Chrome extension links to your account through a one-time connection authorization. Extension installation sessions can be reviewed and revoked anytime from your account settings. Revoked extension sessions are no longer accepted by the service.

4. Playbook and Tenant Isolation

Uploaded sales playbooks, battlecards, and objection guides are stored and indexed under strict account or tenant boundaries. Retrieval queries are pre-filtered to the authenticated account or tenant before relevant passages are passed into the live coaching pipeline.

5. AI Provider Processing

VoiceSteer integrates with specialized commercial API providers for reasoning (Anthropic Claude) and document vector embeddings (Voyage AI). Requests are submitted over encrypted HTTPS connections under commercial API terms. VoiceSteer does not submit customer content for public AI model training as a product feature.

6. Usage Integrity and Reconciliation

AI usage and monthly credit movement are tracked through an internal auditable ledger. The system uses atomic reservation and settlement controls to prevent double-charging and automatically releases usage for failed or unfulfilled requests.

7. Infrastructure and Transport

All traffic between the browser, extension, and server is encrypted in transit using standard TLS/HTTPS protocols. Application data and usage records are stored in managed, encrypted relational databases.

8. Data Retention and Deletion

Users retain control over their uploaded playbooks and can remove uploaded documents anytime. Account data and audit logs are retained according to service requirements and can be purged upon account termination request.

9. Incident and Security Contact

For security inquiries, responsible disclosures, or technical security questions, contact our engineering team directly at security@voicesteer.com.

10. Current Posture & Limitations

• VoiceSteer is an early-stage B2B software product.
• Google Meet is the currently verified browser coaching meeting platform. Support for Zoom and Microsoft Teams is planned.
• Formal compliance certifications (such as SOC 2 Type II or ISO 27001) are not currently claimed.
• Enterprise custom security reviews and commercial agreements are available for qualified team deployments.