CX Assist: live, certified and taking client calls in 18 months
The brief
CX Assist needed an AI voice and communications platform that businesses could trust with their calls and their customers' data. It had to go live quickly and pass the security review a larger client runs before signing.
What we did
Our engineers designed and built the platform from the numbers up: the phone network connected underneath, AI voice on top, each client's data held separately, and security controls in from the first release rather than added before an audit. Our in-house lawyer wrote the policies, the client contracts and the data processing agreements. Together we ran the certification programme end to end: the controls, the evidence, the auditors and every question in between.
The result
- Live and taking client calls within 18 months
- ISO/IEC 27001:2022 certified by an accredited certification body, valid to January 2029
- SOC 2 Type 1 attestation, December 2025
- Built to UK GDPR
What happens now
Certification is not a one-off. We monitor the controls continuously and prepare for each year's surveillance audit, and the SOC 2 Type 2 audit is under way.
Find out what your systems should be doing.
A free call with Paul Hanner, then a written summary of what we'd keep, change and build first.
Book a free systems review