Security, in plain English.
How Velzia handles your firm’s calls and your callers’ information. We are an early-stage company, so we tell you exactly what we do today and what we do not do yet.
Last updated: September 24, 2026
On every call
- Velzia says it is a virtual assistant in its first sentence. Callers always know they are talking to AI.
- No legal advice. Velzia collects facts, marks urgent calls by your rules and passes everything to your team.
- Transcripts, not recordings, by default. We turn off audio storage at our voice provider. Your firm gets a written transcript and summary. Audio recording is only enabled if your firm asks for it, and where state law requires consent, callers are told at the start of the call.
Where the data goes
To answer a call, Velzia relies on a small number of service providers. They process call data on our behalf and only to deliver the service:
| What | Why | Where |
|---|---|---|
| Telephony provider | Receives the forwarded call | United States |
| Voice AI provider | Speech recognition and Velzia’s voice | United States |
| Language model provider | Writes the call summary from the transcript | United States |
| Email delivery | Sends the summary to your firm | United States / EU |
We will share the named list of providers with every pilot firm before go-live, and tell you before we add a new one.
Protection
- Encrypted connections (TLS) for our website, our systems and the connection between the phone network and our voice provider.
- Access limited to the few people who operate Velzia, with multi-factor authentication on the accounts that hold call data.
- Summaries go only to the addresses your firm chooses.
- We do not sell caller information and we do not use it for advertising.
Retention and deletion
During the pilot we keep transcripts and summaries for 90 days so your firm can refer back to them, then delete them, unless your firm asks us to keep them for a different period. Your firm can ask us to export or delete its data at any time by writing to hello@velzia.ai.
What we do not have yet
- We do not yet hold third-party certifications such as SOC 2.
- Velzia is not designed for medical practices and does not support HIPAA workloads.
Your responsibilities as a firm
Attorneys stay responsible for supervising the tools they use with clients and prospective clients. The ABA Formal Opinion 512 on generative AI and your state bar’s guidance are a good place to start. We are happy to walk through how Velzia works with your ethics counsel.
Report a problem
If you think you have found a security issue, email hello@velzia.ai with “security” in the subject. We read every report.