Skip to content

Written for whoever has to approve us.

Vendor review is where most AI proposals die, usually over data handling that was never thought through. This page is our answer, including the parts where the answer is no.

What we are registered for

Registered entity
OWLAKE DIGITAL SOLUTIONS
Instrument
Data Protection Act, 2012 (Act 843)
Certificate number
0006797
Valid until
10 September 2027
View the certificate

How the agents are built

Scoped to hold nothing

Our default deployment answers, qualifies and hands over. It reads no customer records, writes to no core system and stores no account data. Where an engagement genuinely needs system access, that is a separate, explicitly scoped phase with its own review. Never the starting point.

You choose where the data sits

By default, call recordings and transcripts are held on our own platform. Where they need to sit on your own systems, each call's transcript and recording is sent to your server as the call ends, and our platform keeps its copy only as long as you set. Owlake does not train on your calls or keep a separate copy of them.

Named sub-processors

Every third party in the path (telephony carrier, speech and language providers, automation platform) is named in the engagement documents before signature, not discovered afterwards.

Prompt-injection posture

Agents are built on the assumption that a caller will try to talk them into something. Instructions arriving inside a conversation are treated as data, never as commands, and the set of actions an agent can take is fixed at build time rather than inferred at runtime.

Claims we do not make.

  • Not a data residency guarantee by default. The speech and language providers we build on process outside Ghana. Where residency is a requirement, say so at scoping and we will tell you honestly whether we can meet it.
  • Not a regulated financial or medical adviser. Our agents are built to refuse and escalate on anything that would constitute regulated advice.