What happens to sensitive tenant data like Social Security numbers and payment info collected during calls?

For Property Management Companies

Voksha is built to avoid collecting the most sensitive data types over the phone in the first place. For payments, rather than taking a card or bank number verbally (which would pull the call into PCI DSS scope, the payment card industry standard governing how card data is stored and transmitted), Voksha directs tenants to your existing tenant payment portal, the one built into AppFolio, Buildium, or whatever software you use, so card and bank details are entered directly into a system already built to handle that securely. The same logic applies to Social Security numbers for rental applications: Voksha does not collect or store SSNs, it directs applicants to your formal application in your leasing software where that data is captured through a proper, secured intake flow rather than spoken aloud on a recorded call. What Voksha does collect and store is call content relevant to property management operations, tenant name, unit number, issue description, appointment requests, which is encrypted in transit and at rest. On the Enterprise plan, Voksha offers HIPAA and GDPR-level compliance controls, HIPAA is most relevant if your portfolio includes senior living or assisted living properties where health-related information comes up in tenant communication, and GDPR matters if you manage properties on behalf of international owners or investors whose personal data you process. For a standard residential or commercial property management company without those specific circumstances, the practical security question is usually just data encryption and access controls, which apply on every plan, not just Enterprise.