Vetted Intake
Security & technical controls

Data-handling and intake controls.

Plain language your firm's counsel can evaluate in ten minutes. The written scope sets the retention, isolation, redaction, and legal-hold controls, and we test them before live traffic.

No training on your data. Ever.

We use enterprise voice and language-model providers under contractual no-training and data-protection terms, including zero-data-retention API terms where available. Caller content is not used to train a model. This reduces the training-related consent concern discussed in ABA Formal Opinion 512; the firm and its counsel remain responsible for their obligations.

Short retention, by design
Raw call audioOff by default; ≤ 7 days for approved QA
TranscriptsUp to 3 days; the firm may choose less
Intake fields + conflict resultFirm-selected schedule
Per-firm isolation

Separate firm data boundaries are in place before live traffic.

PII / PHI redaction

A pattern filter removes Social-Security-shaped and payment-card-shaped digit strings from the intake record we create, before that record is stored. It runs on our own record only and does not redact the voice provider’s copy of the transcript, which is not redacted today.

AI output is labeled

Every summary reads "AI-generated, unverified, attorney to confirm," so it is never mistaken for attorney work product.

Per-matter legal-hold switch

When included, legal hold suspends scheduled deletion for the selected matter.

Enterprise posture

Workforce AI Corp, operating as Vetted Intake, extends its SOC 2 Type II control environment to each signed implementation. A BAA can be arranged during implementation when the signed scope requires one.

SOC 2 Type IIHIPAA / BAA by arrangement