Trust

Know where your voice data is stored and how it is handled.

Core production voice data on Signals is hosted in Nigerian data centres. Signals operates within an ISO/IEC 27001:2022-certified information security management system. NDPC registration and 2025 Data Protection Audit evidence is available during enterprise vendor due diligence.

Local data map

Call recordingsNigeria — no cross-border replication
Call detail recordsNigeria
KYC dataNigeria
API logsNigeria
Primary backupsNigeria
Disaster-recovery copiesNigeria — geographically separated
Monitoring and supportNigeria
ISO/IEC 27001:2022-certified ISMSNDPC registration · 2025 Data Protection AuditTelecommunications delivered under an NCC licenceCore voice data hosted in Nigeria99.99% enterprise SLA

Data location

Core production voice data stays in Nigeria.

  • Call recordings are 100% Nigeria-hosted, with no cross-border replication.
  • Call detail records, KYC data and API logs are hosted in Nigeria.
  • Primary backups and geographically separated disaster-recovery copies are hosted in Nigeria.
  • Production monitoring and support operations are based in Nigeria.

Transactional email and website analytics may use external providers. Where cross-border processing applies, it is governed by safeguards consistent with NDPA transfer requirements.

Assurance and registration

Data-protection evidence for enterprise review.

Operating framework

Signals operates within an ISO/IEC 27001:2022-certified information security management system, and telecommunications services are delivered under an NCC licence.

NDPC registration

Evidence of registration with the NDPC as a Data Controller/Processor of Major Importance is available during enterprise vendor due diligence.

Data protection audit

Evidence of the completed 2025 Data Protection Audit is available during enterprise vendor due diligence.

Agreements

Data processing agreement and roles.

  • A data processing agreement is available and is executed as part of enterprise contracting.
  • Controller and processor roles for each category of data are confirmed contractually rather than assumed.
  • Paystack supports payment processing. The full applicable service-provider and subprocessor schedule is supplied with enterprise data-processing documentation.
  • A documented breach-management and notification process is in place, and notification obligations are confirmed contractually.

Retention

Base-plan entitlements and enterprise retention.

Base plan

  • ₦500,000 per year platform access.
  • 500 call recordings included monthly.
  • 90 days of call history and storage included.
  • These are included Base-plan entitlements, not enterprise platform limits.

Enterprise agreements

  • Recording capacity provisioned to match expected traffic, with no fixed public ceiling.
  • Configurable multi-year retention aligned with your regulatory, legal and internal obligations.
  • Active storage for the working window, with automatic archival to lower-cost storage and defined retrieval SLAs.
  • Authorised users can export recordings through the API or the dashboard before scheduled deletion.
  • Retention configured per customer and per use case.

Next step

Request the data-protection documentation.

The enterprise pack includes the DPA, data-protection evidence, the architecture and data-flow summary and the applicable service-provider and subprocessor schedule.

Security and Compliance →