Security & control

Built so your team stays in charge.

Approval modes, privacy commitments, where your data lives and the technical summary your IT will ask for, on one page you can forward.

Security & control

AI answers what it verifies. Your people decide the rest.

The architecture is built to reduce risk: approval queue, ERP field sources, escalation, and audit trail.

DefaultShadow mode

Allcatch catches and drafts everything on your real traffic. Nothing reaches a customer. You watch the drafts accumulate and judge the quality on your own traffic, not on a demo.

When you are readyLive

You flip it on when the drafts have earned it, and back at any time. Turned on, Allcatch answers from data it has verified against your ERP, and routes everything else to your team.

AlwaysThe handoff

No verified price, a manual contract rule, a spec it is not sure of: it hands to your team. Your operator is paged, the customer gets an honest holding reply, and the draft is never sent.

The switch is yours: move it either way, at any time. The third card is not a setting: answering only from verified ERP data is how Allcatch is built, in every mode.

Voice is held to the same bar. Until a call can verify against your ERP the way our text pipeline does, the Allcatch phone line catches the request, routes it, and takes a message; it does not quote prices, confirm stock, or promise dates. Nothing about a phone call lowers what has to be true before a customer hears an answer.

Control

  • Default: every reply waits for your one-touch approval.
  • Drafts cite the ERP fields used.
  • Missing or unusual data hands off to a human.
  • All activity stays in the audit trail.

Privacy

  • We do not use customer data to train or improve AI models.
  • Scoped role access limits what each team member sees.
  • Phone capture is consent-first where recording is used.
  • California and other state rules are handled through explicit consent language, not silent recording.
Recording is presented as a consent-first feature. Allcatch does not claim blanket legal compliance without customer-specific review.

For your IT review

  • ERP access is read-only by default. The only write path is order drafts, and only where you enable it.
  • What we read: items, inventory, customers, pricing context and receivables, plus industry-specific balances such as cylinders, scoped to what the desk needs.
  • Role access uses scoped keys that fail closed: a role that should not see pricing cannot request it.
  • Every draft, approval, and handoff lands in the audit trail.
  • When you leave, your conversation and demand data exports with you.
A full security architecture summary is available on request. Ask for it on the demo.

What Allcatch is built not to do

  • Answer outside your ERP data, or guess.
  • Write to your ERP beyond order drafts.
  • Train or improve AI models on your data.
  • Change your phone numbers or carriers.
  • Lock your data in. Your ERP stays the system of record.

Where it runs

Standard: a US cloud region, under your agreement. On request: your own infrastructure, when your IT policy requires data on your side. The option is chosen on the diagnostic, from your company's requirements.

Who has access and what is recorded

Every step of the desk is in a protected log: who asked, what the desk replied, who on your team approved or edited. Access is role-scoped: each user sees only what belongs to their role; financial figures are visible to the owner only. The retention period of the log is fixed in the agreement for your company.

When an answer disagreed with a fact

The log shows what the customer asked, what the desk replied and which ERP data it used at that moment; the discrepancy is reviewed from that record. Disputed and unusual cases go to your specialist in any case; they are not left to the desk's judgment.

When you leave

Your commercial information remains the company's property by contract and by law. The exact procedure, export, timing, deletion of copies, is fixed in the agreement for your company. Your conversation and demand data export with you.

Privacy notice

Beyond standard server logs, the personal information this site collects is what you type into the demo form: your name, company, work email, ERP system, and an optional phone number. It is used for one purpose: responding to your request. We do not sell it, share it with advertisers, or use it to train or improve AI models.

Want it gone? Email info@allcatch.ai and it will be deleted. The full Privacy Policy covers everything else, including our text messaging program, call recording, and your California privacy rights. See also the Terms of Service.