# Data and security planning

> Questions to resolve about data access, model processing, retention, approval boundaries, and operational ownership.

Canonical page: https://ayroflow.com/docs/data-and-security

Updated: 2026-10-19

## Understand the information involved

- Identify personal, customer, financial, and internal information in the workflow.
- Agree the minimum information needed for each task.
- Identify where information is stored and which services process it.
- Confirm access roles and which actions need human approval.

## Agree lifecycle and responsibility

- Set retention and deletion requirements.
- Define consent and recording requirements for voice workflows.
- Choose the people responsible for access reviews and incidents.
- Use sample or anonymized information during evaluation where possible.

## Read the product-specific policies

Ayroflow's privacy policy covers the website and related apps. Product-specific deployment arrangements, security requirements, and contractual commitments need to be confirmed for your implementation. This planning guide does not assert compliance certification.

## Related resources

- [Privacy policy](https://ayroflow.com/privacy-policy)
- [Secure operations services](https://ayroflow.com/services/secure-operations)

Contact: contact@ayroflow.com