Trust and security

TrueTone is built so your account, your organization’s content, and your clients’ information stay protected. Sign-in is secured, every organization is walled off from every other, spending is capped so nothing can run away, and any time a person acts on an account it is deliberate and recorded.

What it is

This section is the plain-language account of how TrueTone keeps things safe. It is written for people making a trust decision, not for engineers, so it covers what is protected and how you would know, without turning into a technical manual.

There are four things worth understanding, and each has its own page below: how your account is protected, how one organization’s data stays separate from another’s, how spending and automated abuse are held in check, and how access by TrueTone staff and org admins is governed and left as a clear record.

Who it is for

Loan officers

You want to know your account is yours, your drafts are private, and nobody quietly acts as you. Start with Account protection and Impersonation and audit.

How TrueTone protects you

Four protections work together. None depends on you remembering to turn it on.

Your account

You sign in with your email and a password, and every new account has to confirm its email before it goes live, so an address cannot be claimed by someone who does not control it. One-time email sign-in links and Google sign-in are part of the foundation and on the way, but email and password is the way in today. Your account is yours, and the pages that let a company act on your behalf are governed and recorded rather than silent. The full picture is in Account protection.

Your organization

Every organization’s data stands on its own. One company’s loan officers, contacts, drafts, and settings are separated from every other company’s, and that separation is enforced and audited. Information from one organization cannot surface inside another. Within your own company, what each person can see and do follows their role. The detail is in Data isolation and Roles and permissions.

Your spending

Content generation is metered in credits and every account carries a spending cap, so no mistake, loop, or bad actor can run up unlimited usage. On a company account, each seat also has a per-seat limit that draws from a shared pool, giving admins a second layer of control. On top of that, the tools that create content are rate-limited and screened by bot protection, so automated abuse is turned away before it costs anyone. See Abuse and spend protection.

Staff and admin access

Sometimes TrueTone support, or your own org admin acting through your marketing team, needs to look at or work in an account. When that happens it is a deliberate choice, not a back door. The person picks a mode up front (look only, or act on behalf), states a real reason, and everything they do is recorded as the real person acting for the account. The record always shows who actually did what. See Impersonation and audit.

Good to know

💡

This section describes principles, not internal mechanics. It tells you what is protected and how you would see it, which is what a trust decision actually turns on. If you need contractual or technical detail beyond what is written here, ask your TrueTone contact.

⚠️

A few honest notes so nothing is oversold:

The Compliance Gate is a governance control, not a security wall, and it is staged. It is designed and contracted, rolling out channel by channel in advisory mode, and it does not block content today.
Some admin controls are set up with TrueTone today. A few governance panels (like roster controls) are handled with TrueTone during onboarding while the self-serve versions roll out. The controls themselves are already live and enforced.