Security & privacy · The record

Your clients' data, handled with care.

Suivo handles emails, calls, texts, and client data on behalf of your team. Here is exactly how it is stored, used, and protected.

Stored in Canada
Encrypted at rest
No AI training on your data
Role-based access

Six commitments,
in plain language.

The document

All data is stored in Canada on encrypted infrastructure (AES-256 at rest, TLS 1.3 in transit). We do not sell or share your data with third parties.

  • Canadian data residency, no cross-border transfers
  • Retention policies configurable per team
  • Full data deletion on account closure

Suivo reads only what is necessary to process contact conversations. Emails are parsed for intent and context, not retained in raw form beyond the contact record.

  • OAuth connections, your password is never stored
  • Agents can disconnect any mailbox at any time
  • No email content used to train AI models

All parties are informed at the start of any Eva-handled call. Calls are never recorded. Suivo keeps only a transcription, used to build the summary and qualification notes.

  • Disclosure at the start of every Eva call
  • No audio recordings, transcription only
  • Transcripts visible only to your team, deletable at any time

All AI outputs are surfaced to agents for review before any action is taken. Suivo is a human-in-the-loop system by design. Nothing goes to a client without agent approval.

  • Your data is never used to train AI models
  • AI processing happens within Canada
  • All AI actions are logged and auditable

Role-based access is enforced at the database level. Agents see only their assigned opportunities. Team leads have visibility across the team. No one sees data outside their role.

  • Row-level security via Postgres RLS
  • All access events logged for audit
  • Team lead and agent roles are clearly separated

Client information is treated as sensitive personal information under PIPEDA. Teams are the data controllers, Suivo acts as a data processor on their behalf.

  • Clients can request deletion of their data
  • Full isolation between teams, no data shared
  • PIPEDA-aligned agreements available on request

Have questions?

Questions about security?

We'll answer plainly. No lawyer-speak, no vague policy language.

Get in touch contact@suivo.ca