How CallMerlin keeps your data safe
Security in plain language, no buzzwords.
You call or chat
CallMerlin core
PIN + 2FA
Prove who you are first. No session without verification.
The director
Understand the ask, plan steps, pick tools. Fast and bounded.
Server permissions
Only what you may do. Enforced in code, not in a prompt.
Your systems
CallMerlin answers
Voice or chat, in seconds. Same core on every channel.
Every channel uses the same secure core.
Access & vaults
Three separate settings, each with its own job
PIN group, vault and permissions work together. Sensitive data stays with the right people.
PIN group
Tasks and cases for a team
Does not hide dataConnection group
The vault
Which connections Merlin may usePIN permissions
What Merlin may do
Read, write, pay, and moreLisa · Marketing
- PIN group: Marketing
- No vault set
- Shared connections only
- Private bank not visible
Shared
Visible in every vault. Company CRM, team chat.
Exclusive
Only inside a vault. CEO private bank.
CEO
- PIN group: Leadership
- Vault: Leadership
- Shared CRM + private bank
- Private bank only in this vault
Server-Level Permission Enforcement
Like your banking app, the app only shows what you're allowed to see, no matter what you type. Permissions live in our server code, not in the AI prompt. Impossible to bypass.
PIN + two-step verification
Every team member gets a 6-digit PIN. Sensitive actions require an extra code via authenticator app (recommended) or SMS. The authenticator app works anywhere, even offline. Works identically on phone and the intranet widget.
Hands-Free Verification (Smart 2FA)
Calling from your own registered number? When your carrier cryptographically confirms your caller ID, or your number was recently verified, Merlin can skip the extra verification code. Your PIN is always required, you choose the security level per organization, and a PIN reset instantly revokes all trusted numbers. Perfect for car kits and hands-free calling.
AES-256-GCM Encryption
All API credentials are encrypted at rest with AES-256-GCM, the same encryption used by banks and governments.
EU-Hosted Infrastructure
Account and platform data on Google Cloud in the EU. Chat, voice and transcripts may go to xAI (US) for AI under DPA/SCCs.
Audit Logging
Write and delete actions are logged with timestamp, PIN user, integration and outcome. Available in the dashboard under Call logs → Audit log. No conversation content or data from external systems, metadata only. Identity follows your privacy choice (name, pseudonym or anonymous). 90-day retention by default.
Widget Security
Domain whitelist (only your approved origins can load it), origin validation on every request, Shadow DOM isolation. The widget cannot be embedded on unauthorized sites.
Compliance
GDPR-compliant by design. Data Processing Agreement available on request. Regular third-party security reviews.
CallMerlin Edge (on-prem), early access
For MSPs and organizations that want sensitive tool traffic and data to stay local. PIN, permissions and audit stay with CallMerlin. Edge is early access for design partners, not generally available yet.
Learn more about Edge →Register interest →