Prepare and draft
Summaries, drafts, research, records updated. Low-risk work the agent does on its own.
- Home
- Trust & Safety
Trust & Safety
What happens to your data, said plainly.
Connecting your phone line, inboxes and CRM to AI agents is a serious decision. This page says what we do, what we don’t, and what we don’t claim.
Your data
Only what the process needs. Deleted when you ask.
Your data is used to run your agents, nothing else. It is never sold, never shared for marketing, and deleted on request at any time.
- Hosting and AI models
- Named, with their regions, in the data processing agreement you sign before we connect anything.
- Use of your data
- Only to run your agents. How each provider handles it, including model training, is set out provider by provider in the same agreement.
- Call recordings & transcripts
- Kept only for the period agreed with you, then deleted.
- Access at Leadways
- Limited to the people who build and support your agents.
- Deletion
- On request, at any time. When you stop, we hand back what you need and close every connection.
Control
Three levels, written down before launch.
Each agent has its own permissions. It only reads and does what its role needs.
Anything that leaves the company
Proposals, replies, posts and documents wait for a named person to approve them.
Exceptions
Pricing exceptions, complaints, sensitive or unclear cases go straight to a person, with the context.
Every action is recorded in an activity history you can review.
AI disclosure
IRIS always says it is an AI.
Every call starts with IRIS introducing itself as an AI assistant, and the caller can ask for a person at any time. Callers are informed when a call is recorded. This is how we apply Article 50 of the EU AI Act, in force since 2 August 2026.
“Good afternoon, you’re speaking with IRIS, the AI assistant of Brightwell Facilities. I can help you or put you through to a colleague. How can I help?”Example greeting, adapted to each client
Providers
The providers we rely on.
What your agents rely on, by purpose. The full list of subprocessors under the GDPR comes with your agreement.
- AI language models
- Voice and telephony
- Hosting and storage
- Email and calendar
The providers used for each purpose, and where they process data, are named in your data processing agreement. We tell you before adding a new one.
Documents & rights
What you can ask for.
We don’t claim certifications we don’t hold. These documents are available before anything is connected.
- Data processing agreement (GDPR art. 28)Signed with every client before connection.Request the DPA →
- Privacy policyHow this website and our service handle personal data.Read the privacy policy →
- Access, correction, deletionFor you, your team or your callers, at any time.hello@leadways.ai →
Questions
What IT and finance ask.
What happens when an agent makes a mistake?
Anything that leaves the company waits for approval, so most mistakes are caught before they matter. Every action is recorded; we review exceptions with you every month and adjust the rules.
Can we revoke access at any time?
Yes. Each connection can be cut on your side or ours, immediately. When you stop, we close every connection and delete your data on request.
Does each agent see everything?
No. The shared business context holds what you approve, and each agent only reads the part its role needs. Sensitive information is used only when the process requires it.
Discovery call
20 minutes to find your first priority.
Show us one process that slows your team down. We tell you honestly what the agents would do, what stays human, and whether it is worth building.
- 01 Pick a slot
- 02 20-minute call
- 03 Leave with a first priority
