Skip to main content
Volimox
Back to Volimox

Data and trust

What should you ask about data access and retention?

A voice workflow can touch caller details, recordings or transcripts, business records, and provider systems. The right answers depend on the specific deployment, its contracts, and the data the business chooses to collect.

A working example

A callback request with more data than it needs

An office wants an assistant to take callback requests. It needs a name and contact path, but it may not need a full conversation history in every destination. Before launch, the office asks where the request is stored, who may view it, and when each copy is removed.

Map the data and its owners for the actual workflow. Do not infer a retention period, privacy guarantee, or regulated-use approval from a generic demo.

Follow data through the whole request

Write down what a caller may provide, what the agent creates, and every place the information goes: phone or voice provider, workflow service, staff notification, CRM or scheduling tool, and business records. Include recordings and transcripts only if that deployment uses them.

Separate demo data from customer data. The practice and limo examples on this site use fictional material where labeled, but an interactive visitor may still submit their own details. Public demos should use invented names and avoid payment card numbers, passwords, government identifiers, and sensitive medical information.

Ask who can see and change each record

Identify business staff, Volimox operators, and providers with access. Ask how access is granted, reviewed, and removed when roles change. For connected systems, define which actions the agent may perform and which require human approval.

A customer should know how to find a request, correct an error, and trace a change. These answers must come from the agreed implementation and provider terms, not from a general integration category.

Agree retention before collection starts

List the retention period and deletion method for each copy, including provider-held call data, application records, backups where relevant, and messages sent to staff. Confirm who handles a request to access or remove information and what legal or operational duties may affect it.

The website privacy page is a working draft about this site and its demonstrations. A customer deployment needs its own reviewed terms, provider settings, consent language, and notices for the selected workflow. This guide does not set those terms.

Before setup

Questions to bring to the conversation

  1. 01List each data item the workflow truly needs.
  2. 02Draw every destination, including providers and staff messages.
  3. 03Name who may access, correct, export, or delete each record.
  4. 04Record the actual retention settings and contractual terms for every copy.
  5. 05Review the customer-facing notice and consent language before collecting live data.

Common questions

Clear answers before a pilot

Is the website privacy page our customer deployment policy?

No. It is a working draft for the site and demonstrations. A production customer workflow needs deployment-specific review and terms.

Should we enter real patient or payment information in a demo?

No. Use fictional details in a public demo and avoid sensitive medical, payment, identity, or account information.

Can Volimox state one retention period for every workflow?

Not without reviewing the chosen systems, provider settings, and agreement. Map and confirm retention for the specific deployment.

Does deleting a CRM record delete every copy?

Do not assume so. Check transcripts, messages, providers, exports, and backup handling for the actual workflow.

See the next step

Map your data paths with us

Bring the systems, people, and providers involved in one proposed workflow. We can identify the access and retention decisions that need review before launch.

Continue