00 Security
Your data, your customers' calls, protected.
What we do to keep your business data and your callers' conversations safe — stated plainly, with nothing we can't stand behind.
Encryption in transit
Every connection to Yelow — the website, the dashboard, and the calls and messages your agent handles — travels over encrypted connections (HTTPS/TLS). We do not serve unencrypted traffic.
Restricted operator access
The surfaces our own team uses to operate Yelow are separate from the customer product and locked down to authorized operators. Administrative access is limited to the people who need it, and operator sign-ins are logged.
Data isolation
Each business's data — menu, services, hours, call activity — is kept separate and scoped to that business's account. Your agent answers with your data and nobody else's, and another customer's account cannot read yours.
What we don't claim
We don't list compliance certifications we don't hold, and we won't pad this page with ones we're "working toward". If we attain a certification, it will appear here with a date. Questions about our practices before you sign up? Ask us directly at [email protected] — you'll get a straight answer.
Responsible disclosure
Found a vulnerability? Email [email protected] with enough detail to reproduce it. We read every report, we'll acknowledge yours, and we ask that you give us a reasonable window to fix the issue before disclosing it publicly. Please don't access data that isn't yours while demonstrating a finding.