Security

Last updated November 5, 2026. Draft pending legal review.

Recordings and notes

Audio is stored privately and deleted after a transcript is saved. Transcripts and notes are deleted after 30 days. A free note is deleted after 24 hours.

CRM connections

Connection credentials are encrypted at rest. Disconnecting removes the credential. Callfiled checks the contact before filing and asks you to choose if the match is unclear.

Access

Sign-in links expire after 15 minutes. Session cookies are secure and inaccessible to browser scripts. Private app pages are excluded from search indexing.

Report an issue

Email hello@barakatlabs.com. Our security disclosure file has the same contact.