Questions masjid boards ask
Straight answers about your community's data, how the AI behaves, and what happens if you leave.
Last updated October 2026
Your data
Is our data safe?
Yes. It's encrypted in transit and at rest, stored on US cloud infrastructure (AWS), and isolated in your own environment that no other organization can access. Access is role-based and enforced by the system.
Who can see our data?
Only authorized users in your organization. Our platform team has access only for technical support, and only with your prior consent.
Can another masjid see our information?
No. Every organization has its own isolated environment, enforced at the database level.
Where is our data stored?
With our managed hosting, on secure US cloud infrastructure (AWS), and it doesn't leave US servers. If you choose to host on your own server, it stays there.
Why not keep our data on our own server?
You can. If you'd prefer to keep your data on your own server, we can scope a self-hosted setup with you, and your team or IT provider looks after that server. Many organizations choose our managed cloud instead, because it includes automatic updates, continuous monitoring and redundant backups without needing IT staff.
Is our data used to train AI for other customers?
No, not without your written opt-in. This is a contractual prohibition.
How the AI behaves
Does the AI make decisions without our permission?
No. The AI prepares and recommends. Any consequential action needs explicit human approval. If it's unsure, it says so and routes the question to a person.
Does the AI answer religious questions?
If you'd prefer that the AI not answer religious questions, we can set it up that way. Those questions then go to a scholar or imam your masjid designates, and every routing is logged.
Does the AI receptionist call or text people on its own?
No. It answers inbound calls. All automated messages follow workflows your masjid approves.
Are phone calls recorded? Who can hear them?
Recordings and transcripts stay in your isolated environment. Only authorized users in your organization can access them.
If something changes
What happens if we decide to leave?
You own your data. You get a full export in a standard format within a 90-day window. Your data is never held hostage.
What if there's a security incident?
We notify you without undue delay, and no later than 72 hours after we're notified, with what happened, what was affected and what we're doing about it.
What if the system goes down?
Data is backed up regularly and stored separately. The platform is monitored continuously, and maintenance is included.
Providers and certifications
Do you have SOC 2 or ISO 27001?
Not yet. We enforce the controls (encryption, tenant isolation, role-based access, audit logging, contractual breach notification). We'll pursue formal certification when client requirements call for it, and we will never claim a certification we don't hold.
Who are the technology providers?
Our core providers include AWS (hosting), Twilio (voice and messaging) and Anthropic (AI models). The full subprocessor list is in our Data Processing Agreement. No data is sold or shared for marketing.