Trust Centre

Your business runs on conversations.
We treat them like they're yours.

GreenWeka captures your calls, emails, messages, in-person conversations and video meetings so nothing slips through. That only works if you can trust us completely with what we hold. This page explains, plainly, how we secure it, who touches it, and what your rights are.

Security contact
security@greenweka.com
Operated by
Web 3 Limited, New Zealand
Last updated
20 October 2026
Overview Compliance Data handling Subprocessors Documents Controls FAQ

Independently verified

Compliance & verification

We don't ask you to take our word for it. These are the assessments and verifications we've completed with third parties, and the platforms that reviewed GreenWeka before listing it.

Google CASA Tier 2

Passed Google's Cloud Application Security Assessment, the independent security audit required to access Gmail data.

Google OAuth verified

Approved by Google's restricted-scope review for Gmail access, including how we store and process your email.

Microsoft verified publisher

Web 3 Limited is an authorised publisher in Microsoft Partner Center, verified for identity and business registration. That verification is what lets GreenWeka's Outlook, Outlook Calendar, Planner, To Do and OneNote integrations run on Microsoft 365.

Payments by Stripe

We never see or store your card details. All payments are handled by Stripe, a certified PCI Level 1 provider.

HubSpot App Marketplace

Passed HubSpot's app review and listed on the HubSpot App Marketplace, which checks how an app requests, uses and stores customer data before it is approved.

Simpro Technology Partner

Approved by Simpro as a Technology Partner, with production access granted after their review of the integration.

Fergus Marketplace

Listed on the Fergus Marketplace as an approved integration for Fergus customers.

Claude connector directory

Reviewed and listed in Anthropic's Claude connector directory, which checks a connector's sign-in, permissions and tool behaviour before it is published.

From call to deletion

How your data is handled

Every conversation follows the same protected path through our system. Here's the whole journey.

Captured

Calls, emails and messages are captured over encrypted connections (TLS 1.2+, SRTP for voice). Nothing travels in the clear. Video meetings are captured by a visible notetaker that joins as a named participant and records audio only.

Processed

Transcription and analysis run with specialist AI providers, listed in full below. Your data is processed only to serve you: never sold, never used for advertising.

Stored

Your data is stored encrypted at rest on secure cloud infrastructure, isolated per account. You choose in your settings whether call audio is kept or deleted once it has been transcribed. Recordings you keep are moved into our own encrypted storage, not left sitting with third parties, and locked with a key unique to your account. Meeting audio is copied to our own storage the moment the meeting ends and deleted from the capture provider straight away.

Accessed

Only you and the team members you invite can see your communications. Internal access is least-privilege, limited to what's needed to run and support the service.

Deleted

Close your account and your data is deleted from our systems within 30 days. Third-party processors delete their copies on their own published schedules.

Full transparency

Who touches your data

These are the categories of third-party service we use to run GreenWeka, what each does with your data, and where. The full named list is available to customers and prospective customers on request: email security@greenweka.com.

ProviderPurposeRegion
Cloud infrastructureHosting, databases and encrypted storageGlobal (US provider)
Telephony carriersCall carriage and recording over encrypted trunksNew Zealand / Australia
Speech processingConverting speech to text, and the assistant's voiceAustralia / United States
AI analysisSummarisation and extraction, with no training on your dataUnited States
Real-time communicationsVoice and video session infrastructureAustralia / United States
Meeting captureA visible notetaker joins your video meetings and records audio; its copy is deleted as soon as ours is madeUnited States
AuthenticationLogin credentials onlyAustralia (Sydney)
PaymentsCard processing; we never see your card detailsUnited States

The paperwork

Policies & documents

Everything in writing, in one place.

Privacy Policy
What we collect, why, and your rights under the NZ Privacy Act and Australian Privacy Principles.
→
Terms of Service
The agreement between you and Web 3 Limited.
→
AI & Data Use Statement
How AI processes your communications, and what it's never used for.
→
Data Processing Addendum
For customers who need a formal DPA, available on request via security@greenweka.com.
→
Subprocessor List
The full table above: every third party we use, what they do, and where.
→

The details

Security controls

A concise list of the measures in place.

Infrastructure

  • Encryption in transit (TLS 1.2+)
  • Encryption at rest
  • Encrypted voice media (SRTP)
  • Content Security Policy enforced
  • Enterprise-grade DDoS protection
  • Serverless architecture: no servers to patch

Product

  • Per-account data isolation
  • Team roles & seat-based access
  • OAuth-only integration access; we never store your passwords
  • Verified caller ID
  • Video meeting notetaker is always visible and named; you can call it back at any time
  • Account deletion on request

Organisational

  • Least-privilege internal access
  • Security review for all third-party providers
  • Incident response process
  • Regular dependency & vulnerability updates
  • Independent security assessment passed (Google CASA Tier 2)
  • NZ company, subject to the NZ Privacy Act 2020

Straight answers

Questions people actually ask

Is my data used to train AI models?

No. We never train models on your data, and we've configured our AI providers so they don't either. Our AI analysis provider does not train on customer data as a matter of policy, and we've opted out of the model-improvement programs run by our speech providers. Your conversations are processed to serve you, nothing else.

Who can listen to my call recordings?

You, and the team members you've invited to your account. That's it. You choose in your settings whether call audio is kept or deleted after transcription. Recordings you keep are encrypted in our own storage with a key unique to your account, so they can't be opened or played from our storage systems, even by GreenWeka staff. Playback only happens through your signed-in account.

What is the notetaker that joins my video meetings?

If you switch it on, a notetaker named after you (for example "Sam's notetaker (GreenWeka)") joins Zoom, Microsoft Teams, Google Meet and Webex meetings on your calendar, or any meeting whose link you paste. Everyone in the meeting can see it, the host can decline or remove it, and you can call it back from your dashboard. It records audio only. The recording is moved into our encrypted storage as soon as the meeting ends and deleted from the capture provider, then transcribed the same way as your calls. Nothing is captured from your meetings unless you switch the notetaker on.

Where is my data stored?

Your communications, transcripts and recordings are stored encrypted on secure cloud infrastructure. Call media and real-time voice are processed in Australia, close to home. GreenWeka is operated by Web 3 Limited, a New Zealand company, so your data is protected under the NZ Privacy Act 2020.

Is call recording legal for my business?

In New Zealand, it's generally lawful to record a call you're a party to: NZ operates on a "one-party consent" basis, though the Privacy Act 2020 still requires you to handle recordings responsibly. In Australia, the rules are set state-by-state under surveillance devices legislation and some states are stricter, so the safest practice everywhere is to let callers know they're being recorded. This is general information, not legal advice; if you're unsure, check the rules for your state or get advice.

What happens to my data if I cancel?

Close your account and your data (recordings, transcripts, emails, messages, contacts) is deleted from our systems within 30 days. If you want a copy of anything first, ask us before you close.

How do I report a security issue?

Email security@greenweka.com. Every report goes straight to the engineering team and we aim to acknowledge within one business day.

Still have a question?

Security, privacy or compliance: ask us directly at security@greenweka.com