Trust
Enterprise-Grade Security.
Built for UK Business.
A phone system holds some of the most sensitive material a business generates. Here is exactly how it is protected and who is accountable for it.
Platform controls
The Controls That
Are Always On
These are not optional extras or enterprise-tier upsells. Every tenant runs with them from the first call.
TLS 1.3 / SRTP
Calls encrypted in transit
Encrypted Storage
Recordings encrypted at rest
Retention Controls
Choose how long recordings and voicemail are kept
Role-Based Access
Granular permission controls
Access Logging
Recording playback and admin changes are logged
UK & EU Data Storage
Stored in the UK and EU; AI processing under DPAs
Regulatory position
Accountable, Not Just
Compliant-Sounding
Aymex LTD operates AymexConnect under Ofcom's General Conditions. The company and data protection registrations below are real and checkable - you should verify them before trusting any provider with your numbers.
- Registered entity
- Aymex LTD
- Company number
- 15515557 · Registered in England & Wales
- Data protection
- ICO Data Protection Registration: ZB691380
- Registered office
- 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Ofcom General Conditions
Operates under Ofcom's General Conditions
Emergency Services
999/112 access supported
GDPR Compliant
Full data protection compliance
CLI Verification
Caller Line Identity verified
Business Verification
Identity and trading checks before a number goes live
Data handling
Straight Answers to the
Questions Procurement Asks
Where your data lives
We store your data in the UK (Amazon Web Services, London) and the European Economic Area (our application hosting and meetings infrastructure in the EU). Some service providers, such as payment, email and AI providers, process data in the United States under UK-approved safeguards (the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum). The privacy policy lists every sub-processor and where it operates.
How calls are protected
Signalling is carried over TLS 1.3 and media over SRTP, so neither the call setup nor the audio travels in the clear.
Who can reach what
Role-based permissions control who can manage users, numbers, recordings and billing, administrators choose which chargeable destinations the team can call and set a daily spending limit, and playback of call recordings is logged.
What happens on request
Administrators can delete recordings and voicemail from the dashboard at any time, set how long they are kept, and download a full export of their organisation's data. For subject access requests, contact us and we will help.
What happens when you leave
When an account closes you have 30 days to export your data. After that the content is permanently deleted, and backup copies cycle out within a further 60 days, so it is gone within 90 days of closure. Invoices, billing records and call logs are kept for six years because UK tax law requires it.
Need a Security Review Before You Buy?
We will complete your due-diligence questionnaire and walk your team through the architecture.