Security & data
Your calls stay yours.
Sales calls carry customer names, prices and plans. Here's exactly what DebriefIQ can access, where your data goes and how it's protected.
Each company in its own database
Every customer's calls, scores and coaching live in a separate database. Every request is checked against the signed-in person's company before any data is read.
No passwords, encrypted tokens
You sign in with Google or Microsoft, so DebriefIQ never stores a password. The access tokens for your connected tools are encrypted at rest with AES-256-GCM.
The least access that works
Calendars and recordings are read-only. DebriefIQ never sends email, never joins your meetings and never changes a deal in your CRM.
Your team, and only your team
People join your workspace by invitation, or by signing in with your company's email domain if an admin turns that on. Admins can remove anyone at any time.
Access
What DebriefIQ can see and do
Each connection is optional and can be disconnected from Settings at any time, which deletes its stored token.
| Service | DebriefIQ reads | DebriefIQ writes |
|---|---|---|
| Your name and email to sign you in, your calendar (read-only), and Google Meet transcripts (read-only). | Nothing. | |
| Microsoft | Your name and email to sign you in, your Outlook calendar (read-only), and, if an admin approves it, Teams meeting transcripts (read-only). | Nothing. |
| Zoom | The transcript files of your cloud recordings. Not the audio or video. | Nothing. |
| HubSpot or Salesforce | Companies, contacts and deals, to match each call to the right record. | A note for each scored call and a task for each follow-up. DebriefIQ doesn't edit or delete your records. |
| Slack | Nothing. | The weekly digest, to the channel you choose. |
Processing
Where your data goes
AI scoring and coaching
Transcripts are sent to Google's Gemini API to score calls, write coaching and answer questions. DebriefIQ uses Gemini's paid service, under which Google doesn't use your prompts or responses to improve its products. DebriefIQ itself never trains models on your calls.
Storage
DebriefIQ stores transcripts, scores, coaching, follow-ups and upcoming calendar events. It never stores call audio or video. Live call assist streams audio from your browser straight to Gemini for the length of the call. Servers: Google Cloud.
Payments
Paddle.com, our reseller and Merchant of Record, processes every payment. Card details go straight to Paddle; DebriefIQ never sees or stores them.
Your control
Delete what you want, when you want
Delete any call from its page, along with its scores and coaching. Disconnect any tool from Settings and its access token is deleted. To delete your company's whole workspace, email us and we'll confirm when it's gone.
Found a vulnerability, or have a security questionnaire? Email support@debriefiq.com. We'll reply quickly and credit responsible reports. More detail is in our privacy policy.
Questions about security?
We're happy to walk your team through how DebriefIQ handles data before you start.