Confidentiality agreements
- Every rep, pod lead and team member signs a confidentiality and non-disclosure agreement before they get access to any client system or data.
- Obligations cover your customer lists, leads, scripts, pricing, playbooks, call recordings and business information, and continue after the person leaves.
- We sign a mutual NDA with your company on request before discovery, and a client agreement with confidentiality terms before launch.
Access control
- Reps work inside your tools, under accounts you provision and can revoke at any time.
- Access follows least privilege: each rep sees only the accounts, fields and records their role needs.
- Multi-factor authentication is required on every system that supports it.
- No client data is downloaded, exported, copied to personal accounts or shared outside approved tools.
- Pod leads review access monthly and remove anything no longer needed.
Work environment
- Reps work from private, quiet spaces. Calls are never taken in public places.
- Screens lock when unattended, and client data is never photographed, printed or recorded on personal devices.
- Time tracking and activity monitoring run during client hours, disclosed to every rep.
Calls, recordings and QA
- Calls are recorded only in your approved system, with the disclosures your account requires.
- Recordings and transcripts are used for QA scoring, coaching and reporting to you, and nothing else.
- AI tools used for transcription and scoring run under vendor terms that prohibit training on your data, or are approved by you first.
- Recordings are kept for 12 months by default, or on the schedule in your agreement.
Calling and texting compliance
- Reps contact only leads you provide or approve, and rely on your consent records for calls and texts.
- Do-not-call and opt-out requests are honored on the spot and logged, and passed to you within 1 business day.
- Calls follow federal and state calling-hour rules for the lead's time zone.
- Texts go out only from registered numbers and campaigns, with the opt-out language your program requires.
Healthcare and regulated data
For healthcare clients, we sign a Business Associate Agreement before reps touch protected health information, and reps complete HIPAA privacy and security training before go-live. Other regulated data, such as financial or payment data, is handled only under written terms that match the regulation.
Offboarding and deletion
- When a rep leaves your account, access is removed the same business day and you are notified.
- When an engagement ends, we return or delete client data we hold within 30 days and confirm in writing.
- Rep devices and accounts are checked for client data during offboarding.
Incidents
If we learn of a security incident that affects your data, we notify you within 72 hours, contain it, investigate and share what happened and what we changed. Reps report suspected incidents to their pod lead immediately.
Questions and audits
You can request a copy of our rep NDA template, a summary of controls for your account, or a review call with our operations lead at legal@revhires.com.