Security and data handling
What happens to
your data.
Voice troubleshooting and migration touch sensitive material: call records, phone numbers, device credentials. This page says what each CollabPlane product does with it.
Workbench
- Uploaded captures are not kept. Traces, logs and packet captures are parsed in memory and are not written to disk.
- Analysis results expire. Call ladders and findings are stored so you can return to them, then purged on a schedule your organization sets. The default is 30 days and the maximum is 180.
- Phone numbers are masked by default. Revealing a full number is a deliberate action and is recorded in the audit log.
- Saving credentials is optional. You can type cloud or device credentials for a single use. If you save them, they are encrypted, and no screen or interface returns them in readable form.
- Device changes are controlled. A pushed configuration is preceded by a backup, recorded with who made it and when, and can be rolled back. Organizations can require approval before any push.
- The collector connects outbound. The on-site agent reaches your devices from inside your network and calls out to Workbench. No inbound firewall rule is needed.
- Single sign-on. Organizations can require sign-in through Google Workspace or Microsoft Entra ID.
Vector
- No direct connection to the source system. An on-site collector reads the existing phone system and produces a signed inventory. Vector works from that inventory.
- Outbound to the target only. Vector connects to the platform you are migrating to, using credentials you provide for that project.
- Credentials are encrypted and scoped. They belong to one migration project and are not shared across projects.
- Projects are private. A project is visible to its creator until it is shared with named people.
- Every change is recorded. Each provisioning step is logged so that it can be verified and reversed.
- Strong sign-in. Accounts can be protected with a passkey or an authenticator app.
Studio
- Each organization is kept separate. Every tenant has its own database.
- Nothing is pushed to your devices. Studio generates configuration for you to review and apply. It does not change an external phone system.
- Recordings and captures expire. Call recordings are kept for 14 days and signaling captures for 7 days by default.
This website
- No trackers. The site has no analytics scripts, advertising trackers or accounts.
- The pilot brief stays with you. It is built in your browser and is not sent anywhere.
Questions from your security team
Send questionnaires and specific questions to operations@collabplane.com. We will answer for the product and release you are evaluating.