Security
How Houji Handles Your Data
Houji is built for professional services firms that handle sensitive client communications. This page describes our security practices plainly, without marketing language.
Infrastructure
Houji runs on Google Cloud Platform in the United States. All data — including call transcripts, firm configurations, and account information — is stored in a PostgreSQL database on Google Cloud SQL. Connections use TLS encryption in transit, and data is encrypted at rest on Google Cloud infrastructure.
Call Handling
When a caller reaches your Elise number, the call audio is streamed in real time to Deepgram for transcription. We do not record or store call audio — only the text transcript is retained. The one exception is a paused or suspended account: callers then hear a short announcement and can leave a voicemail of up to sixty seconds, which is held by Twilio for your firm to retrieve and is not transcribed. Transcripts are stored in your dashboard and are visible to your firm; Houji personnel can also access them for the limited purposes described in our Privacy Policy.
AI responses are generated by Anthropic's Claude. Conversation content is sent to Anthropic for processing during the call. Anthropic does not use Houji call data for model training under our API agreement.
Voice responses are generated by ElevenLabs. Response text is sent to ElevenLabs in real time. ElevenLabs does not retain call audio.
Access Controls
• Firm accounts are password-protected with bcrypt hashing. Passwords are never stored in plaintext.
• Sessions are stored server-side using PostgreSQL session storage. Session cookies are HTTP-only and secure.
• Admin access to the Houji platform requires a separate admin account with mandatory two-factor authentication (TOTP).
• Houji personnel can access call transcripts and firm configurations, but only for limited purposes: to operate the service and respond to your support requests, to investigate errors, security issues, or misuse, and to review how Elise handled calls so that we can find and correct mistakes. Access is limited to the people who need it for those purposes, and they are bound by confidentiality obligations. Infrastructure access is restricted to authorized personnel only.
What Is and Is Not Stored
| Data | Stored? | Notes |
|---|---|---|
| Call transcripts | Yes | Stored in your dashboard; firm-controlled retention |
| Call audio | No | Never recorded; transcribed in real time only. Exception: a paused or suspended account takes a 60-second voicemail, held by Twilio. |
| Caller phone numbers | Yes | Captured via Twilio for message notifications |
| Firm configuration | Yes | Attorney name, office hours, practice areas, etc. |
| Payment card details | No | Handled by Stripe; Houji never sees card numbers |
| Translation call transcripts | Optional | Off by default; firm enables from dashboard settings |
Retention and Deletion
You control how long call transcripts are retained. Options are 30 days, 90 days, 1 year, or indefinitely (the default). You can also permanently delete all call data at any time from your dashboard Account tab. Deletion is immediate and irreversible.
SOC 2 and Certifications
Houji is not currently SOC 2 certified. We follow security best practices appropriate for our size and stage. If your firm has specific compliance requirements (HIPAA, SOC 2, ISO 27001), please contact us at hello@houji.ai to discuss whether Houji is the right fit.
Reporting a Security Issue
If you discover a security vulnerability, please report it to hello@houji.ai. Do not disclose vulnerabilities publicly before giving us an opportunity to address them.