Title: Trust & Security: How Keres Handles Your Data | Keres AI URL: https://www.keresai.com/trust Updated: 2026-10-12 Description: How Keres AI handles your data: encryption in transit, limited access, and no model training on your data. Source: https://www.keresai.com/trust (HTML). This is a Markdown copy of the page's main content for AI agents and LLM tools. --- # Built to be trusted with your calls Keres AI answers your customers’ calls and handles their data every day. Here’s how we protect it: encryption in transit, access limited to the people who run your account, and no training of third-party models on your data. Keres **never uses your data to train third-party models**, encrypts traffic in transit, and limits access to the people who need it. We are plain about what we do not have: Keres is **not SOC 2 or HIPAA certified and does not sign BAAs** today. If your business needs any of those, ask before you sign. ## Privacy and security, stated plainly ### Your data isn’t training data We never use your calls, contacts, or content to train third-party AI models. ### Encrypted in transit Traffic between callers, our systems and the tools we write to is encrypted. ### Limited access Only the people who run your account can see it, and access ends when their role does. ### What we don’t have yet No SOC 2 report, no HIPAA certification, no BAAs. If you need them, ask first. ## How does Keres AI handle client data? The basics, as the [security overview](https://www.keresai.com/legal/security.html) states them: - **Encryption in transit.** Traffic between callers, our systems and the tools we write to is encrypted. - **Access controls.** Least privilege: only the people who run your account can see it, and access ends when a person’s role no longer needs it. - **Retention.** Configured per engagement; we keep only what the service needs to work. - **Export and deletion.** On request, within 15 business days. Email [ops@keresai.com](mailto:ops@keresai.com). - **No model training.** We do not train third-party AI models on client data. - **Website processors.** The vendors behind this website (hosting, contact forms, call scheduling, page-view counting and ad measurement) are listed in the [privacy policy](https://www.keresai.com/legal/privacy.html). Read the details in our [security overview](https://www.keresai.com/legal/security.html) and [privacy policy](https://www.keresai.com/legal/privacy.html). Have specific compliance requirements? [Book a call](https://www.keresai.com/quote) and we’ll tell you honestly whether Keres fits. ## Trust & security FAQ ### Does Keres use my data to train AI models? No. Keres does not use your business data to train third-party models. Your calls, contacts, and content are used to run your service, not to train external AI. ### Is Keres HIPAA compliant? Will you sign a BAA? Not today. Keres is not HIPAA certified and does not sign BAAs. If your practice needs a BAA for phone intake, tell us before you sign up so we can say plainly whether Keres fits. ### Is Keres SOC 2 certified? No. Keres does not hold a SOC 2 report. We describe the practices we follow on this page; if your business requires a certification, ask before you sign. ### How is my data protected? Traffic is encrypted in transit, access is limited to the people who need it, and your data is never used to train third-party models. ### Can I get my data exported or deleted? Yes. Email [ops@keresai.com](mailto:ops@keresai.com) and your data is exported or deleted within 15 business days of the request. Last updated October 12, 2026 · [Reviewed by the Keres AI team](https://www.keresai.com/editorial-policy)