Security and compliance
Your calls hold sensitive information. iAllo is HIPAA-ready and signs Business Associate Agreements (BAAs) with healthcare customers, and it is SOC 2 compliant.
- SOC 2 compliant
- HIPAA BAAs
- AES-256 encrypted transcripts

Compliance
SOC 2
iAllo is SOC 2 compliant.
HIPAA
iAllo signs Business Associate Agreements (BAAs) with healthcare customers.
Your call data
Encrypted transcripts
Call transcripts and voicemail messages are encrypted with AES-256 before they are stored.
In-house transcription for HIPAA calls
Calls for healthcare customers are transcribed by iAllo’s own speech model, not a third-party service.
HIPAA calls never train our AI
Calls covered by a BAA are never used to train or tune iAllo’s AI.
Access
Team roles
Admins manage the team and settings; members get to work. Each person gets their own sign-in.
Passwordless sign-in
Sign-in uses one-time codes sent by email, with limits on repeated attempts.
Security questions
Is iAllo HIPAA compliant?
iAllo is HIPAA-ready and signs Business Associate Agreements (BAAs) with healthcare customers, and it is SOC 2 compliant.
Does iAllo sign a BAA?
Yes. iAllo signs Business Associate Agreements (BAAs) with healthcare customers, such as medical and dental billing teams. Contact us to set one up.
Is iAllo SOC 2 compliant?
Yes. iAllo is SOC 2 compliant.
Are call transcripts encrypted?
Yes. Call transcripts and voicemail messages are encrypted with AES-256 before they are stored.
Does iAllo use my calls to train its AI?
Calls covered by a BAA are never used to train or tune iAllo’s AI.
How do I report a security issue?
Email hello@iallo.io with the details. Please don’t share it publicly until we have fixed it.
Report a security issue
Found a vulnerability? Email us and we will get back to you quickly. Please don’t share it publicly until we have fixed it.
hello@iallo.ioQuestions about compliance for your team? Contact us.