Security & Data Protection

Last updated: July 20, 2026 — Version 1.0

This page describes the technical and organizational measures Zero Headache uses to protect personal data processed through the Service. It forms part of our Data Processing Agreement and our HIPAA-aligned configuration.

1. Encryption

Personal data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256. Call audio and transcripts are encrypted in storage and during transmission to and from sub-processors.

2. Access control

Access to systems that process personal data is restricted to personnel who require it to operate the Service. Access is granted on a least-privilege basis, reviewed periodically, and revoked on role change or departure. All access to production systems is logged and auditable.

3. Hosting & region

The Service is hosted on cloud infrastructure with region-pinned storage for clients who require data residency. EU clients can have data processed and stored in the European Union. US healthcare clients can have PHI processed and stored in the United States. See the Sub-processor List for the hosting providers and their regions.

4. Sub-processors

Each sub-processor is bound by data-protection terms no less protective than our DPA. We do not engage a sub-processor that touches personal data without a signed agreement covering security, confidentiality, and breach notification. See the Sub-processor List for the current set and the DPA for the change-notification process.

5. Incident response

We maintain an incident-response process for security incidents involving personal data. On becoming aware of a confirmed breach, we notify affected clients without undue delay and in any event within 72 hours, consistent with GDPR Article 33. Where required, we notify the relevant supervisory authority or the Indian Data Protection Board, and we support clients in notifying affected individuals.

6. Retention & deletion

Call recordings and transcripts are retained for the period instructed by the client, or until the end of the service relationship. The default retention period for call recordings and transcripts is 6 months unless you instruct us otherwise, and the zero-data-retention option, available as a paid add-on, for healthcare clients purges them after CRM sync. On termination, client data is returned or deleted at the client's direction. Data and traffic logs are retained for at least one year, as required by India's DPDP Rules 2025.

7. No use of personal data for model training

We do not use client or end-customer personal data, call audio, or transcripts to train, improve, or fine-tune any AI model, ours or our sub-processors', without the client's explicit written authorization.

8. Certifications & roadmap

We are working toward SOC 2 Type II. Until that is achieved, we make our security documentation available to clients under NDA on reasonable request. Composio, one of our integration providers, holds SOC 2 and ISO 27001:2022.

9. Contact

Security questions and incident reports can be sent to legal@zeroheadache.co.

What Our Customers Say?

They've Stopped Missing Calls. So Can You.

See how local service operators use our AI agent to answer the leads while you're busy on the job, qualify leads instantly & keep their calendars full.

Full schedule without lifting the phone.

"My front desk person quit on a Thursday. On the Friday we set this up, and by Monday morning it was booking appointments on its own. I do not really understand how it works, and I do not need to. My calendar has been full since that first week."

Massimo Ferretti

Owner, Weight-loss & Wellness Clinic
Milan, Italy

It actually gets the details right.

"We were losing jobs because no one could answer fast enough. We tried two answering services. One was too expensive, the other kept getting the job details wrong and we would have to call the customer back. This one gets the details right the first time, and most callers do not realize it is not a person."

Aoife Brennan

Office Manager, Plumbing & HVAC Company
Dublin, Ireland

The lead is in my CRM before they hang up.

"I almost did not try it. I have been burned by this kind of thing before. We were live in about three days, and it connected to our CRM without me doing anything. My crews get the lead on their phones before the customer has even hung up. That part alone was worth it for us."

Sipho Mahlangu

Founder, Roofing Services Business
Johannesburg, South Africa

Every call gets answered now.

"I run a crew of twelve and I am on sites all day. I cannot answer the phone. It used to go to voicemail, and I would hope people called back. Most did not. Now every call gets answered and I get a text with the details. That is the whole thing for me."

Lukas Hoffmann

Owner, Landscaping Company
Munich, Germany

My advisors can focus on the cars now.

"People call us all day for oil changes, tyres, estimates. We used to miss maybe thirty percent of calls during the busy hours. Now every one of them gets answered, and most get booked on the call. My service advisors can actually focus on the cars in front of them instead of the phone."

Hamish Caldwell

General Manager, Chain of Auto Repair Shops
Manchester, UK

Like a receptionist I can finally afford.

"I started this business from my flat and I still cannot afford a full-time receptionist. This answers my calls, sends out the quotes, and books the walkthrough, all while I am out actually cleaning houses. It is the best money I spend every month."

Lucía Vargas

Owner, Cleaning Services Company
Madrid, Spain

Patients do not realise it is not a person.

"What sold me is that it does not sound like one of those awful phone menus. Patients talk to it normally and it books them in. We had an older patient call last month and she asked the receptionist in our office when our new receptionist had started. She had been talking to the agent the whole time."

Sander de Vries

Operations Head, Chain of Dental Practices
Amsterdam, Netherlands

We cut response time without hiring.

"We manage about two hundred units across four properties. The maintenance requests alone were drowning our office staff. Now a tenant calls, the agent logs everything, creates the ticket, and we dispatch. We cut our response time in half, and we did not hire anyone new."

Henrik Lindqvist

Director, Property Management Company
Stockholm, Sweden

Support answered me at 11 at night.

"We had a strange issue with how it was syncing to our calendar at about 11 at night. I sent a message not expecting a reply till morning. They got back to me in maybe twenty minutes and had it sorted before I went to bed. I have not had support like that from a vendor in years."

Callum Gallagher

Owner, Electrical Services Business
Brisbane, Australia

The first one I trust with our patients.

"I have looked at a lot of these AI phone tools for our locations. Most of them fall apart the second a caller goes off script. This is the first one where I actually trust it with our patients. Bookings are up, no-shows are down, and my front desk team is not burned out anymore."

Camille Laurent

VP Operations, Group of Med Spas
Paris, France