Request a briefingBriefing

Security & governance

Your calls are your agency’s data. We’re specific about what that means.

DeskOfficer operates inside boundaries your agency defines. Every integration is scoped, every access is logged, and you own every recording and transcript.

Start a security review

Where a call goes

From the first ring to the retention date.

  1. 01

    The call

    Answered on your existing phone number. Emergencies are sent to your emergency destination under your rules.

  2. 02

    The conversation

    Processed on U.S. infrastructure. DeskOfficer answers only from knowledge your agency approved.

  3. 03

    The record

    Recording, transcript and summary are stored encrypted, kept for as long as your retention policy says, then deleted.

  4. 04

    Your staff

    See calls according to their role, behind multi-factor authentication. Every access is logged.

Controls

What’s in place, and what isn’t yet.

We list our status as it is. If a control is still in progress, it says so.

Controls7 in place · 1 in progress

  • U.S.-only infrastructureAgency data is stored and processed on U.S. infrastructure. No offshore routing.In place
  • FIPS 140-3 validated endpointsData is encrypted in transit and at rest using FIPS 140-3 validated endpoints.In place
  • Your agency sets access and retentionPermissions, retention periods and data boundaries are set by your agency.In place
  • No training on your callsAgency calls are never used to train shared models or shared with other customers.In place
  • CJIS-aligned designSecurity controls are designed to align with the CJIS Security Policy.In place
  • SOC 2 Type II in progressA third-party SOC 2 Type II audit is underway. It is not yet complete.In progress
  • Audit logsCalls, access and configuration changes are logged for review.In place
  • Role-based access with MFAStaff see only what their role allows, behind multi-factor authentication.In place

Hard limits

What DeskOfficer will never do.

  • Train shared models on your agency’s calls
  • Answer from anything your agency hasn’t approved
  • Connect to a system you haven’t explicitly authorized
  • Keep data beyond your retention policy
  • Move agency data outside the United States
  • Make a decision that belongs to a person

Ownership

You own the data. We process it for you.

Call recordings, transcripts and operational data belong to your agency. We process them on your behalf and store them according to your retention policies.

Need our security documentation, personnel-security details or answers for a procurement questionnaire? Ask during a security review and we’ll walk your IT, legal and command staff through it.

Before you let AI start answering your calls, call us.

We’ll help you see what’s possible, what’s practical and what’s right for your agency, even if the answer is not more AI.

Request a briefing Or get a free caller-experience assessment

We reply within one business day. hello [at] deskofficer.ai