VouchVouch
How it worksAboutPricingSign in
Security & Data

What happens to the data you trust us with.

Candidate names, reference contact details, call recordings, transcripts, and Trust Reports — where each one lives, who can see it, and when it is deleted.

Updated October 8, 2026Staffify, LLCVouch
01No AI training on your dataCalls, transcripts, and reports are never used to train AI models.
02Recordings deleted after 90 daysOr immediately, when you delete the check.
03Consent on every callVera says she is an AI and that the call is recorded.
Overview

Vouch is operated by Staffify, LLC. When you run a reference check, you give us details about a candidate and their references, and Vera, our AI voice agent, holds a recorded conversation with each reference. This page explains how that data is handled. For the full legal terms, see our Privacy Policy.

01Providers (subprocessors)

We use the following providers to run Vouch. Each processes data only to deliver its part of the service.

  • xAI: Live voice conversation with references and Trust Report generation. United States.
  • Twilio: Telephone calls and call recordings. United States.
  • Neon (on AWS): Application database. United States.
  • Vercel: Web application hosting. United States.
  • Fly.io: Voice service hosting. United States.
  • Resend: Email delivery. United States.
  • Stripe: Billing and payments. United States.
  • DeepSeek: In-app support assistant — your name, candidate and reference details are removed before a message is sent. China.

02AI training

Vouch does not use customer, candidate, or reference data — including call audio, transcripts, and Trust Reports — to train or fine-tune AI models.

03Call recordings

  • Every reference call is recorded, and every reference is told so at the start of the call.
  • Recordings are stored by our telephony provider, Twilio — not on Vouch’s own servers.
  • Only the hiring team that ran the check can play a recording, from their signed-in dashboard, so any Trust Report can be checked against what was actually said.
  • Recordings are never included in shared report links or PDF downloads.

04Retention

  • Call recordings are permanently deleted 90 days after the call.
  • Transcripts, Trust Reports, and candidate and reference details are kept while your account is active, until you delete them.

05Deletion

  • Customers can delete a reference check at any time from the dashboard. This permanently removes the candidate and reference details, transcripts, Trust Reports, and call recordings for that check.
  • Candidates and references can request deletion of their data by emailing privacy@staffify.org.

06Encryption and access

  • All data is encrypted in transit (TLS).
  • Data is encrypted at rest by our database and telephony providers.
  • Customers sign in with a single-use email link; there are no passwords to steal. Each workspace sees only its own checks.

At the start of every call, Vera says that she is an AI voice agent and that the call is recorded. The reference’s acknowledgement is noted on the Trust Report. A reference who does not want to be recorded can decline, and that interview is marked incomplete.

08Contact

Security or data questions, or a vendor questionnaire to complete? Email privacy@staffify.org.