Skip to content
Chat with us

Every number is yours. Every action is undoable.

Locked. Logged. Yours.

Kordis holds your workers’ most sensitive details and acts in your agency’s name. Here is exactly how it protects both: in plain language first, the technical fact second, and every claim checkable in the product today.

This page revised September 3, 2026. Legal documents dated August 4, 2026.

One worker record

Amara O. · Reach-truck operator

  1. 01Sealed on arrival

    Sensitive details are encrypted before they are stored.

  2. 02Fenced to your agency

    Row-level security in the database keeps every agency’s records apart.

  3. 03Every reveal logged

    Who looked, at what, and when, written down permanently.

  4. 04Every action approved

    Nothing goes out without a typed authorization and a receipt.

  5. 05Yours to take

    Export it whole, or ask for it to be deleted.

A diagram of how a worker’s record is protected in Kordis, layer by layer. Each layer is a control this page describes.

Hosting

Microsoft Azure, in the United States

Encryption

In transit and at rest. Sensitive fields sealed with AES-256-GCM

Who else touches it

11 named companies, published with what each one handles

Your exit

Export everything whole, or ask for deletion, whenever you like

FIVE THINGS THAT ARE ALWAYS TRUE

Built, tested, and checkable in your own workspace.

Not a policy we intend to follow. Five properties of the product as it runs today, each with the mechanism that makes it true.

  1. 01

    Sensitive details are sealed the moment they arrive.

    Social insurance numbers, birth dates and bank details are encrypted before they are stored. Nobody browses them. Not even us.

    BUILT AND CHECKABLE

    AES-256-GCM envelope encryption with keys held in Azure Key Vault. The database stores sealed references, never raw values.

  2. 02

    Every look at sensitive data is written down.

    Any time anyone views a worker’s sensitive details, Kordis records who looked, at what, and when. Permanently.

    BUILT AND CHECKABLE

    Append-only audit log on every sensitive-field access, with the actor and the purpose attached.

  3. 03

    Your data leaves with you, whole.

    Ask for an export and you get everything, readable. Ask for deletion and it is honoured. Your records are never something we hold over you.

    BUILT AND CHECKABLE

    Built-in export and erasure flows for data-subject requests, themselves audit-logged.

  4. 04

    Money numbers are never invented.

    Every dollar figure you see comes from your own records. The part of Kordis that writes sentences cannot author a money number.

    BUILT AND CHECKABLE

    Deterministic money path: model-generated amounts are rejected by construction, not by review.

  5. 05

    Every answer shows its source, or says it cannot.

    Ask a question and the answer carries a tag you can open, straight to the record it came from. No source, no claim.

    BUILT AND CHECKABLE

    Cited retrieval over your own records. Uncited answers are refused at the engine level.

IN THE PRODUCT

Every action leaves a receipt. This is one.

One call-out, recovered. Who was asked, in what order, what each one said, and the moment a person at the agency approved the name. Nothing on this record can be edited after the fact.

Kordis · Dispatch
Example
Illustrative Canadian staffing data, on real Kordis screens.

HOW IT IS BUILT

Your data. Your decisions. Your exit.

Thirteen controls, grouped by the three questions an owner asks. Each one is a mechanism in the product, not a line in a policy.

Your data

The record itself, and who can see it.

  • Encrypted on arrival

    Sensitive fields are sealed before they are written, so a raw value never sits in the database.

  • Keys kept apart

    Encryption keys live in Azure Key Vault, separate from the data they protect.

  • Fenced to your agency

    Every table that holds your records is fenced to your agency by row-level security in the database itself.

  • Every reveal logged

    Opening a sensitive field writes an audit row that cannot be edited afterwards.

Your decisions

What Kordis may do in your name, and how you hold the dial.

  • One gate for every message

    No text or call leaves without a typed authorization naming who approved it and why.

  • The dial, per kind of action

    Let me do it, Get it ready for me, or Just do it. Every agency starts on the middle setting.

  • Stop everything

    A kill switch on every page pauses all automated outreach at once.

  • Quiet hours held

    Anything that would reach a worker between midnight and 5 a.m. their time is held until 5:00, never dropped.

  • A receipt for every action

    Each automated action leaves a receipt you can open: what Kordis knew, what it did, and why.

Your exit

Leaving is designed to be as clean as joining.

  • Export whole

    Every record, readable, on request.

  • Deletion honoured

    Ask, and it is removed, except where employment law sets a minimum retention period we tell you about.

  • Month to month

    No minimum term. Cancelling stops the next renewal, nothing more.

  • Thirty days to take it with you

    After you cancel, the export window stays open for thirty days before the account is deleted.

THE BOUNDARY

How Kordis uses AI

Kordis is designed around your approval. It prepares the work; a person at your agency makes the call that changes a worker, a shift, a client or a pay record. Where you have turned a kind of action up to run on its own, every send still passes the same authorization gate and leaves a receipt.

What Kordis does

  • Drafts messages and texts in your agency’s voice
  • Runs screening calls with the questions you set for the job
  • Reads résumés and summarizes calls into the record
  • Works out who is cleared, available and close enough to make the start
  • Prepares the outreach, the readiness checks and the hours file

What a person at your agency does

  • Hires, on the evidence
  • Marks a worker ready
  • Approves outreach and assigns the shift
  • Approves the hours file before payroll sees it
  • Sets the dial for each kind of action, and turns it back down any time

What never happens

  • No money number is ever authored by the part of Kordis that writes sentences
  • Nothing is sent, dialled or assigned on its own unless you turned that on for that kind of action
  • Your data is never sold, and never used to train or fine-tune the technology that powers Kordis
  • No answer without a source you can open

THE WHOLE LIFE OF YOUR DATA

How long we keep it, what happens if you leave, and who else touches it.

How long we keep your data

Only as long as running your account and meeting the law require. Placements, timekeeping and payroll data stay while your account is active. Employment, wage and tax records carry minimum retention periods set by law, records of employment and provincial employment records among them, so those are kept for the period the law requires, and we tell you plainly when a deletion request touches one.

Call recordings and transcripts follow your service agreement: ask for deletion and we remove our copies and instruct the calling and transcription companies to remove theirs, which finishes on their schedule rather than instantly. This is the posture PIPEDA expects. The full schedule, subject by subject, is in the Privacy Policy.

What happens if you cancel

You export first, then it is deleted. Billing is month to month with no minimum term, so cancelling stops future renewals rather than starting a negotiation. After that you have thirty days to export your data, whole and readable, before the account is deleted.

Fees already paid for the period you are in are not refunded, which is the one part of this worth knowing before you pick a date. Your records are never something we hold over you to keep you paying. The binding version is section 9 of the Terms.

Who else touches your data

11 named companies, and you can read the list. Each one is published with what it does, what data it touches and where it runs: hosting, sign-in, calling and texting, transcription, voice, background jobs, billing, support chat and error monitoring. All of them run in the United States, including the Microsoft Azure hosting your workspace sits on.

Your data is used only to run your own account, never sold, and never used to train or fine-tune the technology that powers Kordis. The register is the same one the Privacy Policy points at: see every company and what it handles.

STRAIGHT ANSWERS

The questions worth asking any vendor.

Including the certification one. Answered the same way here as everywhere else on the site.

All the questions

Not until you tell it to. Kordis starts every kind of action staged for your approval: it shows you exactly what it wants to do, and nothing that touches money or people goes out without your OK. Like any good hire, it earns more rope only when you hand it over, and you can take it back any time. Every confirmed action leaves a receipt, and reversible operations carry an undo. Kordis does the work. You make the decisions.

FOR YOUR CLIENT’S COMPLIANCE TEAM

Running a vendor security review?

Send your questionnaire and your client’s compliance questions and we answer them straight, in writing. We hold no security certifications today, and we will not claim one until the report is in hand; what we can show is what this page describes, running.

Send us the questionnaire

FOR RESEARCHERS

Report a security issue

If you believe you have found a vulnerability in Kordis, email info@kordisai.com with a clear description, steps to reproduce, and any supporting evidence. Please do not access, change or download data that is not yours while demonstrating an issue. We read every credible report, acknowledge it, fix validated issues, and tell you when it is resolved.

READ THE DOCUMENTS

Everything a vendor review asks for.

Each document is dated to the day it was last touched. Legal documents dated August 4, 2026.

See every claim in action.

In your own workspace, you open the sources yourself, on your own records.

Start two weeks free

Run your real operation for two weeks. No card to start, nothing charged.

  • No card to start
  • Nothing charged
  • Cancel whenever
  • Guided setup
Security at Kordis: locked, logged, and yours