What is kept about a call
- Sammera turns the call into text, a transcript. Your voice and the customer's are transcribed separately.
- Audio is not kept by default. The organisation can turn it on, and then the audio is kept for seven days at most.
- The transcript is deleted after the time the organisation chooses, between one day and one year. The default is 30 days. The organisation can also choose not to keep transcripts at all.
- The summary and the ticket draft should not contain passwords, one-time codes or keys read out loud. Long strings of digits, which often are exactly that, are removed before the draft is shown.
- We never write to your ticketing system. The agent pastes the ticket draft in.
Who sees what
- By default, each agent sees only their own calls.
- The organisation can let team leads see the team's calls, or let everyone in the organisation see everyone's. Whoever changes it has to confirm first, and the change is logged with name and time.
- Four roles control the rest: owner, admin, team lead and agent. Only owners and admins change settings and invite people.
- Owners and admins see a log of who added and removed people, changed roles and changed who sees the calls.
How organisations are kept apart
Every row in the database belongs to an organisation, and the database itself refuses to show a row to anyone outside that organisation. That holds whatever the app or the website asks for. A test signs in as one organisation and tries to read another's data, and it must always fail.
Where data is kept
| Service | Where | What it does |
|---|---|---|
| Supabase | Stockholm, Sweden | The database: accounts, organisations, settings, calls and transcripts. Sign-in. |
| Resend | Ireland | Email: invitations, email address confirmation and new password links. Sees the recipient's address, the inviter's name and the organisation's name. |
| Vercel | The website | Serves this website. Signed-in pages fetch their data straight from the database, so Vercel stores no customer data. |
We run speech recognition ourselves, on our own server in Germany, instead of sending the audio to an outside speech service. The suggestions and the summary are written by a language model. The organisation chooses Sammera's or its own connection, and we tell you which model and where it runs before you start.
Your own AI connection
An organisation can connect its own Claude key, or its own server that follows OpenAI's interface. The key is stored encrypted and never shown again, not even to whoever added it. The address of your own server is checked so it cannot point into our own network.
Sign-in
- An account needs a confirmed email address before anyone can sign in with it.
- Passwords are at least eight characters. New password links work for one hour and only once.
- Invitations are valid for seven days. The code in the link is stored only as a checksum, so not even we can read it in the database.
Questions
If you need to know more for an impact assessment or a procurement, write to hello@sammera.com.