07Security & Trust

Your audit trail is the moat.
Treating it like one is the job.

Relay12 stores transcripts, customer data, and your corpus. The page below is the short version of what we do with it. The long version lives in our DPA, available on request.

Security posture

HostingVercel · US-East · Neon Postgres · US-East
Encryption at restAES-256 (Neon) · S3 SSE for media
Encryption in transitTLS 1.2+ · HTTPS-only
PII scrubbingPre-storage · Anthropic Claude · regex backstop
AuthStack Auth · email magic link · phone OTP for techs
Retention default36 months · per-dealer override
ExportJSON · CSV · TXT · anytime · self-serve
Deletion on cancelWithin 30 days · final ZIP archive emailed

Compliance

SOC 2 Type I

In audit

In flight

SOC 2 Type II

Q4 2026 target

Roadmap

GDPR / CCPA

Data subject requests honored

Live

EPA 608 disclosures

In product copy

Live

Things we won't do

  • ○ We don't train foundation models on your transcripts.
  • ○ We don't share dealer data across dealers.
  • ○ We don't answer safety-critical procedures (refrigerant recovery, electrical lockout, gas line work) without a senior-tech gate.
  • ○ We don't hide PII handling — it's in the dashboard, on every transcript.

Vulnerability disclosure

Found something? Email security@relay12.com. We respond within one business day. Researchers acknowledged in our hall of fame.

Start free trial →