AIVAON Connect is a pre-release inbound AI receptionist. Pilot availability is subject to qualification. Live go-live is not authorized in this environment.

How does AIVAON handle phone calls?

When a call arrives via PSTN, SIP, or WebRTC, AIVAON answers in under 1 second. Eight AI agents simultaneously analyze voice for intent, emotion, context, and safety. The AI takes action within the conversation — booking appointments, answering questions, qualifying leads, or routing to a human agent with full context.

Is AIVAON free for consumers?

Yes. Consumer access to AIVAON is always free. Anyone can call or use the help network to get instant AI-powered assistance. AIVAON connects consumers to the right service providers through its Ambient Help Layer — no sign-up required.

What industries does AIVAON serve?

The first bounded pilot is one United States local-service business. Healthcare, legal, financial, insurance, and other regulated decisions are excluded from the first pilot.

Is AIVAON compliant with healthcare and financial regulations?

Controls for HIPAA, PCI-DSS, SOC 2 Type II, and GDPR exist in design. Formal certifications are not issued. Live go-live is not authorized in this environment.

How fast is the AI voice response?

Latency targets exist in design only and are not measured in a named production environment. Live go-live is not authorized in this environment.

What counts as a voice minute?

A voice minute is any minute of active conversation between your AI agent and a caller. Hold time, ringing, and silence are not counted.

Can I bring my own LLM API keys?

Yes. You can use your own OpenAI, Anthropic, Google, or any OpenAI-compatible API keys. Or use our hosted inference at no additional cost.

Is there a free trial?

The Starter plan is free forever with 100 voice minutes / month. No credit card required. You can upgrade to Pro at any time.

How does local-first deployment work?

Enterprise customers can deploy AIVAON on their own infrastructure. AI models run locally, and sensitive data never leaves your network.

What about phone numbers?

Phone numbers are available in 100+ countries via our multi-carrier provisioning. Numbers start at $1/month depending on type and country.

How does pricing work?

Every engagement starts with understanding your challenge. We scope, architect, and price a solution built for your specific operation. For self-serve, AIVAON offers a free Starter tier (100 voice minutes / month), a Pro tier at $0.06/minute with unlimited minutes and 10 ai agents, and custom Enterprise pricing. Consumer access is always free. Partners earn up to 30% revenue share.

Can I deploy AIVAON on my own infrastructure?

Yes. Enterprise customers can deploy AIVAON locally. AI models run on your infrastructure, and sensitive data never crosses network boundaries. This supports air-gapped environments and strict data sovereignty requirements.

What is AIVAON's compliance posture?

AIVAON is engineered to SOC 2 Type II, HIPAA, GDPR, PCI-DSS, and ISO 27001 controls; formal third-party certifications are in progress. Enterprise customers receive a data processing agreement and current compliance documentation.

Security is architecture. Not a feature.

Zero-trust design, local-first processing, and a four-gate certification engine. All of this runs invisibly — you see four clean screens, the brain handles everything else.

On-device inference is a design option. No production cell is verified.

SOC 2 Type II in design — not issuedHIPAA in design — not issuedGDPR in design — not issuedPCI-DSS in design — not issuedISO 27001 in design — not issued

Security architecture

Perimeter

Zero-trust network
mTLS
API gateway

Encryption

AES-256 at rest
TLS 1.3 in transit
SRTP media

Processing

Local-first inference
Data never leaves your region

Compliance

Automated auditing
Continuous monitoring

Seven layers of identity. Zero compromise.

JWT Authentication—RS256 + Argon2idRotating keys, httpOnly cookies, cross-tenant isolation
WebAuthn / Passkeys—FIDO2 Level 3Touch ID, Face ID, YubiKey — passwordless by default
OAuth2 / OIDC—OAuth 2.1 + PKCEDPoP tokens, pushed authorization, JWKS rotation
SAML SSO—SAML 2.0Okta, Azure AD — JIT provisioning, encrypted assertions
MFA / TOTP—RFC 6238Google Authenticator, Authy, 1Password — hardware key support
API Keys—Scoped + Rate-LimitedPer-key scopes, sliding window limits, rotation with grace period
Continuous Auth—Behavioral + BiometricDevice fingerprint, velocity analysis, risk-based step-up challenges

Verification is planned. None of the four gates have passed.

Contract, shadow, canary, and certification gates exist in source. None are evidenced for a named environment.

Contract

Contract Verification

Schema correctness, idempotency, negative handling, timeout behavior, retry logic, circuit breaker activation via deterministic replay packs

Shadow

Shadow Mode

Live traffic mirrored in parallel to shadow Kafka topics and shadow ClickHouse tables with continuous diff engine comparison

Canary

Canary Deployment

One pilot org, one phone number, one percent of traffic behind LaunchDarkly feature flags with automated watchdog

Certified

Full Certification

Load spike testing, dependency failure injection via Chaos Mesh, recovery verification, complete audit trail validation

Evidence vault

OpenTelemetry traces in ClickHouse, structured logs in Loki, encrypted call recordings, shadow diff reports, SLA/SLO compliance, security event logs, billing reconciliation, workflow execution traces, checkpoint persistence — all cryptographically hash-chained

OpenTelemetry traces (ClickHouse)
Structured logs (Loki)
Encrypted call recordings with proof
Shadow diff reports
SLA/SLO compliance reports
Security event logs
Billing reconciliation records
Workflow execution traces
Durable checkpoint persistence

See security in action

Book a personalized demo and review our compliance evidence.

Book a personalized demo