Security and trust

Updated: September 24, 2026

This page states what Vantact operates, where, and how, in plain terms. Every line here is something we will put in writing in a contract or an RFP response.

In short

  • Vantact is Canadian owned and operated. Client data is hosted in Canada.
  • Vantact's infrastructure runs in Toronto colocation facilities whose operators hold SOC 2 Type II reports.
  • Calls to and from Canadian numbers are carried on Canadian-owned carriers and routed within Canada.
  • Phone signalling and call audio are encrypted by default (TLS and SRTP).
  • Infrastructure is maintained, managed and monitored 24/7, with on-call technicians after hours.
  • All personnel are vetted and work under a least privilege access policy.
  • AI call analytics is processed on Vantact-operated hardware in Toronto. No call audio, transcript or summary leaves Canada.

Where your data lives

Vantact's infrastructure runs in Toronto colocation facilities whose operators hold SOC 2 Type II reports. Infrastructure is redundant across two independent Toronto colocation providers. Client data, recordings and transcripts stay in Canada.

Call routing

Calls to and from Canadian numbers are carried on Canadian-owned carriers and routed within Canada. Calls to US and international destinations are handed to carriers in those destinations only; Canadian traffic never transits a foreign network.

Encryption

Phone signalling and call audio are encrypted by default (TLS and SRTP). The client portal, analytics portal and support desk are served over HTTPS only.

Operations and monitoring

Infrastructure is maintained, managed and monitored 24/7. Live support runs 9 to 5 ET on business days. After hours, the emergency line is answered by an on-call technician; more than one technician is on call at any time.

People and access

All personnel are vetted. Access to client systems and recordings is limited to named support staff under a least privilege policy, and is granted for the task at hand rather than by default.

AI processing

Call transcription and AI analysis for Vantact AI call analytics run on Vantact-operated hardware in Toronto. No call audio, transcript or summary leaves Canada.

AI voicemail transcription is a separate feature. It uses a Google speech service and is not enabled for healthcare clients or other clients handling personal health information; those clients receive voicemail as audio only.

Privacy law

Vantact supports PIPEDA and PHIPA requirements for Canadian organizations, and HIPAA requirements for healthcare clients. Recording retention and access are configured per client.

Frequently Asked Questions

Is Vantact SOC 2 certified?keyboard_arrow_down
Vantact's infrastructure runs in Toronto colocation facilities whose operators hold SOC 2 Type II reports. SOC 2 is an auditor's attestation report, not a certification; ask us what you need for your RFP and we'll tell you exactly what we can provide.
Where is my call data stored?keyboard_arrow_down
In Toronto colocation facilities, in Canada. Recordings, transcripts and AI summaries do not leave Canada.
Do my calls leave Canada?keyboard_arrow_down
Calls to and from Canadian numbers are carried on Canadian-owned carriers and routed within Canada. Only calls to US or international destinations are handed to carriers in those destinations.
Are calls encrypted?keyboard_arrow_down
Yes. Phone signalling and call audio are encrypted by default (TLS and SRTP).
Who can access my recordings?keyboard_arrow_down
Named Vantact support staff under a least privilege policy, for the task at hand. You control who in your organization has access through the portal.
Is the system monitored overnight?keyboard_arrow_down
Yes. Infrastructure is monitored 24/7. Live support runs 9 to 5 ET on business days, and the after hours emergency line is answered by an on-call technician.

Questions for your security review?

Send us your questionnaire and we'll answer every line in writing.

Contact us call 1-800-805-3590