Company
Security
Your calls and call contexts are confidential business information. This is how we look after them.
Cyber Essentials
Productimiser Ltd is certified under Cyber Essentials, the UK government-backed scheme covering firewalls, secure configuration, access control, malware protection and patching.
Annual penetration test
An independent penetration test of ExactSay is carried out every year, and what it finds is fixed.
Only what's needed
Your calls are processed only to make your cards and summary, and never used to train models. No bot joins your meeting.
How we protect your account and data
- Encrypted in transit. Every connection to ExactSay uses HTTPS, including the live call.
- Secure sign-in. Passwords are never stored in readable form, sessions expire, and invite links are time-limited and can be revoked.
- Separated by workspace. Only members of your workspace can open its call contexts, calls and billing.
- An audit trail of changes to call contexts, the team, billing and calls, visible to your workspace.
- Not used for training. Your audio, transcripts and call contexts are never used to train models.
- Card details are handled by our payment provider and never reach our servers.
The providers that process data on our behalf are listed in the privacy policy.
Reporting a vulnerability
Write to security@exactsay.com with what you found and how to reproduce it. We'll acknowledge it within two working days and keep you posted until it's fixed. Please don't access other people's data, degrade the service or publish the issue before it's fixed.
Security questionnaires and supplier forms: hello@exactsay.com.