Security your IT team can sign off on
Everything your security review asks about Allo, on one page: compliance, encryption, recording consent and who can see what. Forward it, or bring us into the conversation.
- GDPRCompliant
- SOC 2Compliant
HIPAABAA available
Compliance you can check
The three answers our home page gives, with the detail behind each one. The documentation lives on our Trust Center.
For the calls, recordings and transcripts on your lines, Allo acts as your processor under Article 28 of the GDPR and only processes them on your instructions.
Allo is SOC 2 compliant. For the documents your security review needs, start from our Trust Center or ask our team.
On Business and Ultra, Allo signs a Business Associate Agreement for $50 a month per workspace. No body certifies HIPAA, so we sign the agreement rather than claim a certificate.
Every teammate has a role, and a member only sees the lines they have access to. Billing stays with the owner.
- Visit our Trust Center
How your data is handled
What happens to a call after it ends, and who decides how long it stays.
Encrypted at rest and in transit
Data is stored with AES-256 encryption and stays encrypted on its way between your team, your callers and Allo.
You decide how long it stays
Recordings and transcripts are kept until you delete them. Delete a recording from the app any time, or ask us to delete them automatically after a set number of days.
Deleted when you leave
When an account is deleted, its recordings and transcripts are deleted automatically six months later.
A European AI, if you prefer
Switch from the default AI provider to Mistral, a European AI company. It is available on every plan.
Recording and consent, on your terms
Recording laws differ by country and by state, and following them is up to you. Allo gives you the controls to do it.
A consent message
Play a recording notice before an inbound call connects, line by line. You can also add the announcement to your phone menu.
Read the compliance guide
Privacy mode
The audio file is never saved, while transcripts and AI summaries keep working. Our support team turns it on per line, per user or for the whole company.
Summaries without transcripts
Turn transcription off and Allo only writes the AI summary from the live call, with no word-for-word transcript stored.
Everyone sees only what they should
Four roles decide who runs billing, who configures lines and who can open a recording.
Owner
Runs the whole workspace, billing included.
Admin
Everything except billing: manages the team, assigns numbers and sees every call and recording.
Manager
Configures the lines they have access to.
Member
Uses the lines they have access to. Sees their own calls and the ones on their lines, never a teammate's private calls.
Everything your IT team will ask for
Send this page, then the sources below. If a question isn't answered here, our team will answer it.
Our Trust Center
Our compliance status and the documentation behind it, in one place.
Visit the Trust Center
Our privacy policy
What we process, why, for how long, and the GDPR rights you can exercise.
Read the privacy policy
A call with our team
A security question we haven't answered here, the BAA, a call with your IT lead: book a time with us.
Talk to our teamSecurity questions, answered
Missing a question? Talk to our team or check our Trust Center.
Yes. For the calls, recordings and transcripts on your lines, Allo acts as your processor under Article 28 of the GDPR. Where data is transferred outside the European Economic Area, those transfers are covered by the European Commission's standard contractual clauses.
Yes, Allo is SOC 2 compliant. For the documents your security review needs, check our Trust Center or talk to our team.
Allo signs a Business Associate Agreement with your workspace, a $50 a month add-on on the Business and Ultra plans. It covers calls, recordings, transcripts, AI summaries, messages and contact records. No body certifies HIPAA compliance, so we don't claim a certificate. How to request the BAA.
Yes. Data is encrypted at rest and in transit, and AES-256 encryption is included on every plan.
Yes, every call made through Allo is recorded, transcribed and summarized. Recording can't be switched off in the app: privacy mode (no audio kept) or summaries without transcripts cover most needs, and our support team can turn recording off entirely.
By default, until you delete them. You can delete a recording from the app any time, or ask our support team to delete recordings automatically after a set number of days. If the account is deleted, they are deleted automatically six months later.
Removing a member takes effect immediately: they lose access to the app and to calling, and their numbers can be reassigned. The call history stays with the team.
Allo runs at 99.94% uptime, and you can follow it live on status.withallo.com.