Skip to content
Security

Your leads are your business. We handle them like it.

Vistrial brings together calls, touches, and outcomes for each lead. Here is where that data comes from, how it is protected, and what we never do.

Request a security reviewRead the details

At a glance

  • Separate by design

    Every customer has a private workspace. Row level security in the database keeps one workspace from reading another.

  • Nothing sends without approval

    Relay drafts follow-ups. A person approves each one. Opt-outs, do-not-contact markers, and quiet hours are checked again at send time.

  • Read first

    Vistrial reads the CRM you connect. It does not change that CRM unless you turn a write on and a person approves the action.

  • Quiet hours

    The default quiet hours are 8 pm to 8 am in the lead's local time. A message waits until quiet hours end.

  • Important actions are recorded

    Approvals, status changes, and staff actions write an audit row with who did it and when.

  • You can disconnect

    A source can be disconnected from the workspace. Ask the team if you want imported data deleted. Deletion is not automatic.

Where your data comes from

One lead can show up in more than one tool. Vistrial reads the sources you connect.

  • CRM: GoHighLevel works today. Contacts, stages, and call activity that the connection is allowed to read. Other CRMs are not listed here until they are built.
  • Call transcripts, when a recording source is connected. The case file is built from that text.
  • Calendar bookings, when a calendar is connected: booked, rescheduled, canceled, and no-show events that connection can see.
  • Form events sent to a webhook address that belongs to one workspace.
  • Notes and corrections your team types in Vistrial.

Airtable is not a live connector. HubSpot is not a live connector.

Safe follow-up

Relay prepares drafts. Your team approves each one. Right before sending, Vistrial checks consent and opt-outs, do-not-contact markers, and quiet hours (no messages between 8 pm and 8 am in the local time of the lead, by default). If a check fails, nothing is sent.

AI with guardrails

  • Scribe, Relay, and Compass run against the workspace they are opened in.
  • Text inside a lead record is treated as data to read. The agent instructions say not to follow instructions found in that text.
  • Those agents do not send, change, or delete on their own. A person approves anything that would reach a lead.

What we never do

  • Send a follow-up to a lead without a person's approval.
  • Message a lead between 8 pm and 8 am in that lead's local time, under the default quiet hours.
  • Change your CRM unless you turn that on.
  • Show connection keys on this public site.
  • Let one customer read another customer's workspace.

Your choices

  • Disconnect a source. New data from that source stops. Existing case files stay until you ask for deletion.
  • Ask for an export, a correction, or deletion. A person verifies the request. Nothing is deleted or exported automatically.

Under the hood

  • The website and the app are served over HTTPS. Browsers are told to stay on HTTPS.
  • Payments go through Stripe. Vistrial stores a Stripe customer reference, not a full card number.

Subprocessors

Where we are today

Vistrial is not certified under SOC 2, ISO 27001, or a similar standard. There is no badge for that. We will answer a security questionnaire.

Request a security reviewReport a vulnerability

Email contact@vistrial.io or use the report page.

Last updated: October 14, 2026