Trust is the product, not a feature.

• Every business is walled off

  Each business's data is separated by rules inside the database itself, so one business can never see another's calls, customers or settings, even if application code has a bug.

• Connections are sealed

  Calendar and CRM access tokens are encrypted at rest, never sent to the browser and never logged. Disconnecting deletes them.

• Least access

  Nerro asks connected tools only for what it needs: calendar events, not your email or files; CRM contacts, not your whole account.

• Nothing claimed that didn't happen

  Your AI employee can only say a booking, message or transfer happened after the system behind it confirms it. Every action is recorded step by step on the call.

• Tested before it goes live

  Every employee runs simulated calls, including emergencies and requests for a person, before it can take real calls. If any fail, it stays off until they pass or you accept them yourself.

• Verified accounts and safe sign-in

  Every account verifies its email before it can be used. Passwords are stored hashed. Team members join only by invitation to their verified email.

• Signed requests

  The voice worker and outgoing webhooks sign every request, so a forged request is refused.

• You decide how long transcripts live

  Transcripts are deleted after the period you choose, from 30 days to 2 years.

Found a security problem? Email support@nerro.si. Details of what we collect are in the Privacy Policy.