Skip to main content

Our Technology Stack

We build on established, independently audited providers so your data and calls are handled by secure infrastructure.

Vendors, services, locations and certifications in the BrightLaunchIQ stack
VendorServiceLocationCertifications
AWSCloud InfrastructureUnited StatesSOC 2, ISO 27001, HIPAA
Google Cloud PlatformCloud InfrastructureUnited StatesSOC 2, ISO 27001, HIPAA
SupabaseDatabase & AuthenticationUnited StatesSOC 2 Type 2, HIPAA
VercelFrontend Hosting & Edge NetworkGlobalSOC 2 Type 2, ISO 27001, HIPAA, PCI DSS
OpenAILarge Language ModelsUnited StatesSOC 2, ISO 27001
AnthropicLarge Language ModelsUnited StatesSOC 2, ISO 27001, HIPAA
Retell AIVoice AI PlatformUnited StatesSOC 2 Type 1 & 2, HIPAA, GDPR, PCI DSS
TwilioTelephony APIUnited StatesSOC 2, ISO 27001, HIPAA
Cal.comAppointment SchedulingUnited StatesSOC 2 Type 2, ISO 27001, HIPAA
StripePayments & BillingUnited StatesPCI DSS Level 1, SOC 2
ResendEmail DeliveryUnited StatesSOC 2 Type 2, GDPR
Google WorkspaceEmail & CollaborationGlobalSOC 2, ISO 27001, HIPAA, FedRAMP
LovableApp Development PlatformUnited StatesSOC 2 Type 2, ISO 27001
GitHubCode Hosting & Version ControlUnited StatesSOC 2 Type 2, ISO 27001, HIPAA
Make.comWorkflow AutomationEurope/USISO 27001, SOC 2 Type 2

This list is updated regularly. For the most current information, visit our Trust Center.

Our Safeguards

How we protect your business, your callers and their information.

  • Encryption

    Your data is encrypted in transit and at rest by our infrastructure providers.

  • Access control

    Customer records are restricted to your account and our admin team, enforced at the database level.

  • Call recordings and transcripts

    Only the account owner and authorized BrightLaunchIQ staff can view your call recordings, summaries and transcripts.

  • Data retention and deletion

    Email [email protected] to delete your data. We process requests within 30 days, including backups.

  • AI and your data

    Customer data is never used to train public AI models. It is only used to serve your business.

  • Payments

    Card details are handled by Stripe. We never see or store your full card number.

  • Vendor review

    We choose vendors with published, independently audited certifications such as SOC 2 and ISO 27001.

Found a security issue? Email [email protected]. We aim to acknowledge reports within 48 hours.

Want our thinking on responsible AI? Read The Governance Gap in AI.