Security | Step Into AI

Step Into AI will hold calls, customer records and operational data for the businesses that use it. That is a responsibility we take seriously. This page describes what is in place for this website and the enquiry data it collects today, and the standards every platform service is built to before it goes live. We only publish claims that are true, and we will add specifics to this page as each service launches.

This website and your enquiry data

The website and the enquiry records it collects are hosted with a UK provider in UK data centres.
All connections use HTTPS with TLS, and the site sends HTTP Strict Transport Security headers.
Forms are protected against automated abuse and rate limited. Enquiry data is stored in a database that is not reachable from the web.
Access to enquiry data is limited to the people who respond to enquiries, under confidentiality obligations, using individual accounts and strong passwords.
Advertising and analytics tags load only after you accept them on the cookie banner.

Standards for platform services

Every service in the platform, including telephony, the AI receptionist, the CRM and messaging, is built to the following standards before it is offered to customers:

Hosting. Customer records hosted in the United Kingdom. Where a subprocessor operates elsewhere, it is listed on the subprocessors page with the transfer safeguard in place.
Encryption. Data encrypted in transit with TLS and encrypted at rest by the hosting provider, including call recordings and transcripts.
Access control. Per-user logins with roles, so team members see only what they need. Administrative access by our staff protected with multi-factor authentication and limited to the people who need it.
Backups and continuity. Daily backups stored separately from the live environment, with restores tested. Telephony delivered through carrier networks with redundant routing.
Logging. Automated actions, approvals and administrative changes logged with the user and time.
Human control. Every automated action can be set to require approval, and all automation can be paused with one setting.
Retention. Customer data kept for the life of the contract, exported on request, and deleted within 90 days of termination unless the law requires longer.

Incident response

If we become aware of a security incident affecting your data we will contain it, investigate, and notify you without undue delay with what we know and what we are doing. Where required we will notify the Information Commissioner's Office.

Reporting a concern

If you believe you have found a security issue with our website or platform, email info@stepinto-ai.com with the details. We will acknowledge within two working days and will not take action against good-faith reporters.

Step Into AI is a trading name of Manchester PC Services Ltd, company number 13356970, registered office Jactin House, 24 Hood Street, Ancoats, Manchester, M4 6WX. Contact: info@stepinto-ai.com.