Talk to our security team
Evaluating TrueTone for a brokerage-wide rollout? We will walk through our current controls, our data handling, and whatever your risk team needs answered.
Security
How we think about security.
We are building toward an enterprise-grade security posture in lockstep with our customers. This page is the honest version: what is in place today, what is on the roadmap, and the claims we will not make until they are earned and audited.
What's in place
Real practices, in plain English.
In place todayOn the roadmap
Encryption
Encrypted in transit.
Every connection to TrueTone runs over TLS. Data moving between you and the system is encrypted end to end.
Storage
Encrypted at rest.
Your profile, your drafts, and your account data are encrypted where they are stored.
Isolation
Scoped to your account.
Your data belongs to your account. One customer's content is never visible to another.
Access
Role-based access.
Team accounts run on role-based permissions. People see what their role allows, and nothing past it.
Subprocessors
Vendors under agreement.
The providers that power generation and voice operate under data-processing agreements. They do not own your data.
Scope
Marketing content only.
TrueTone handles marketing content. It does not touch loan files, borrower records, or anything in your LOS.
Certifications
Formal certification, planned.
We are not SOC 2, ISO, or PCI certified today. Certification is on the roadmap, and it will appear here when it is earned, not before.
Audit
Independent audit, planned.
An external security audit is planned. Until it is complete, this page describes only what we actually do today.
Key management
Customer-managed keys, planned.
Customer-managed encryption keys are a roadmap item for brokerage-wide enterprise rollouts.
The honest part
What we don’t claim.
SOC 2, ISO, or PCI certified.
We are not certified. We will not put a badge on this page that an auditor has not earned us. When a certification is real, it appears here with its date.
Automated compliance review.
TrueTone does not decide what is compliant for your loans. You review and approve every piece and route it through your own compliance process.
Access to your loan data.
The system handles marketing content. It does not connect to your LOS, read borrower files, or process loan data of any kind.
Zero-knowledge architecture.
Generating content in your voice means the system reads the content it generates. We will not claim an architecture the product's own function rules out.
Talk to us
Bring your questions.
Start your 7-day trial
Or just try it. A short voice session with Tru, your first draft in your voice, and you decide for yourself.
Start your 7-day trial
Credit card required. Cancel from a settings page, not an email thread.