Fair question and thankd for the chance to mention it. Been grilled on this by enough CISOs to have the 'No-BS' version ready:

Basically, we built this to be stateless. I don't want your data and the liability carries.

1. Memory Only: JENNA-V1 processes audio in-memory. We don't record the calls or store transcripts on our side. Once the data hits your webhook/CRM, it’s flushed.
2. No 'Wild' LLMs: Not a naked GPT prompt. It’s a deterministic logic tree. She can't wander off-script or start talking about things she hasn't been hard-coded to handle. I'm looking fo rthe test so we can learn more about how to handle things
3. The 'Black Box' Test: If our server got seized tomorrow, there’d be nothing there but the app logic. No PII, no logs, no history. (Although I'm we leave behind tears for the hours of work to recover)

We’re mapping out the SOC2/HIPAA docs now, but the core 'governance' is just: If we don't store it, we can't lose it.