Security

Security at AvairAI

AvairAI runs your outbound, which means it handles your contacts, your messaging, and your sending reputation. Here is how we protect your data and keep that outreach compliant, in plain terms your security and procurement teams can check.

Infrastructure

AvairAI runs on Google Cloud, and data moves over encrypted connections. The email infrastructure we provision for you comes fully authenticated with SPF, DKIM, and DMARC, so your mailboxes are trusted by Gmail and Outlook and your domain reputation stays protected.

Compliance

AvairAI is pursuing SOC 2. It is in progress, so we do not claim a certification we do not yet hold; request our security overview for current status. Outbound compliance is built into the product: every contact is verified before sending, and the TCPA compliance check classifies each phone number as safe for AI calling, safe for manual calling only, or do-not-call, so cold outreach stays within the rules. A Data Processing Agreement is available for customers who need one.

Subprocessors and data handling

We keep a current list of the subprocessors that help us run the service. You can review it on our subprocessors page, along with our Data Processing Agreement and Privacy Policy.

Your data, your control

Your campaign data stays yours. The accounts, contacts, and messaging belong to you, and you can export any campaign as a PDF and CSV whenever you want, so you are never locked in. AvairAI does not sell contacts.

Frequently asked questions

Is AvairAI SOC 2 certified?

AvairAI is pursuing SOC 2. It is in progress rather than complete, so we do not claim a certification we do not yet hold. If your procurement process needs current detail, request our security overview and we will share where things stand.

Where is my data hosted?

AvairAI runs on Google Cloud, and data is transmitted over encrypted connections. Your campaign data, including accounts, contacts, and messaging, stays yours, and you can export any campaign as a PDF and CSV at any time.

Which subprocessors does AvairAI use?

We maintain a current list of the subprocessors that help us run the service. You can review it on our subprocessors page, alongside our Data Processing Agreement and Privacy Policy.

How does AvairAI keep outbound compliant?

Compliance is built into the product. AvairAI provisions authenticated mailboxes (SPF, DKIM, and DMARC) and verifies every contact before sending, and its TCPA compliance check classifies each phone number before a call so cold calling stays within the rules.

Need our security overview?

Tell us what your procurement team needs and we will get it to you.