Skip to main content
Scout
Español

○ Security

Security

Scout is built so that a scammer on the line can't steer it, and so each person sees only what they're allowed to see.

  • A scammer can't choose where you're reconnected

    Safe Reconnect only calls Sound Credit Union's number from Scout's directory or a contact you saved during setup. Nothing the caller says, and no AI answer, can change the destination.

  • AI can warn, but never act

    Code rules, not the AI, decide when a warning plays. Nothing in Scout can hang up on its own, move money, or approve a payment.

  • Locked-down data

    Database row-level security keeps each member's data private to them. Employees see only cases members authorized for their own credit union. Automated access checks run against these rules.

  • Signed phone traffic

    Every request from the phone network is checked for the phone company's signature (Twilio or SignalWire). The live-audio connection accepts only short-lived signed tokens.

  • Private helper links

    Each link is a long random token. Only a scrambled version is stored. Links expire after 7 days, can be turned off by the member, show only shared details, are logged when viewed, and are hidden from search engines.

  • Secrets stay secret

    Keys never live in the code. Calling tokens for the app are created per person on the server and expire quickly. The family code word is stored only as a salted hash.

Prototype status

Scout is a prototype in a pilot, and we'd rather say so plainly. During the pilot, the live-audio engine runs on the team's own computer through an encrypted tunnel, and the phone accounts are trial accounts. A production rollout would move the engine to managed hosting before handling members' everyday calls.