Your data and systems
Your data: no consumer names or contact details, contracts first
For: Compliance
We never ask for consumer names, Social Security numbers, phone numbers, email addresses, street addresses or bank details. You send your own account and agent IDs, plus call outcomes, payments and account details such as balance, state, ZIP and an age band. Account IDs are your own, so we cannot tell who a consumer is, and the files are handled under the Data Processing Addendum. If a file arrives with anything we didn't ask for, we delete it and ask you to resend it.
Contracts come before data. The order form, Standard Terms and Data Processing Addendum are signed before any data moves. If you work healthcare accounts, we sign a Business Associate Agreement as well.
Files move by encrypted SFTP, never by email. Your data is used to deliver your work, and deleted within 30 days after the engagement ends, with backup copies cleared on the schedule in the Data Processing Addendum. BestPair keeps the models trained on your data, as Standard Terms 5.2 sets out. Where it is stored is set out in the Data Processing Addendum.
SOC 2: our SOC 2 Type 1 report is available under NDA. Our Type 2 audit is booked with Thoropass, and we will share that report under NDA once it is issued.
For your compliance team: the security pack and the contracts, before the call.
Next: The four files, field by field