Solutions · Financial services

Compliant support automation for financial services

Card questions, payment status, account changes — resolved by an agent with PII redaction on every message, EU data residency and an audit trail your compliance team will actually like.

Conditions · Dawn intake
Warming up
Workload
18 tasks/hr
Revenue today
0.0k
Load across the day
Warming up
12AM6AM12PM6PM
dessa@ops · beat 1/6
faq #inbox → 34 replies drafted
return #48219 → refund approved · policy:auto

Compliance first

Built for regulated support

PII redaction, always on

Names, addresses, account and card numbers are redacted before any model call — on every plan, not as an enterprise add-on.

EU data residency

Choose Frankfurt for storage and inference. Data never leaves the region, and the DPA says so in writing.

A real audit trail

Every answer is sourced, every action logged with the exact API call. Reviews and audits take hours, not weeks.

Guardrails

How Dessa stays inside the lines

  1. 1

    Contain

    Dessa only answers within the scope you approve — product questions, payment status, standard account changes.

  2. 2

    Verify

    Identity-sensitive requests follow your verification flow before any data is shown or changed.

  3. 3

    Escalate

    Complaints, disputes and anything regulatorily sensitive route straight to your team, flagged and documented.

  4. 4

    Evidence

    Every conversation is retained per your policy, exportable, and traceable to its sources.

62%
resolved autonomously
40s
median resolution
32
languages supported
4.8
CSAT after resolution

FAQ

Frequently asked questions

Can we restrict what Dessa is allowed to discuss?

Yes — scope is allowlist-based. She answers only approved topics and escalates everything else, and you can change the list anytime.

How is customer data protected?

TLS 1.3 in transit, AES-256 at rest, PII redacted before model calls, and a contractual no-training guarantee. Full detail in the trust center.

Do you support our retention policy?

Retention is configurable from 30 days to 24 months per data category, with deletion on request.

Is there a compliance review process?

Yes — SOC 2 Type II report, DPA, subprocessor list and architecture review are usually with your team within a day.

Start with a security review

Get the SOC 2 report, DPA and architecture walkthrough first — then decide if a pilot makes sense.