Turn calls into auditable APPI compliance evidence

APPI violations carry fines up to ¥100 million per incident. KoeIQ monitors every call for consent scripts, required disclosures, and PII handling — and generates audit evidence that holds up to regulatory scrutiny.

See a compliance exception reportView security overview

The compliance exposure contact centres face

💴
¥100M
Max fine per incident
Under 2022 APPI amendments
📞
500K+
Calls / year at a large centre
Manual audit covers < 1% of volume
⚖️
Verbal disclosure
Top cause of PII incidents
Agent inadvertently reading PII aloud

Four risk categories monitored on every call

📋

Consent scripting

Detects whether required consent scripts were delivered — recording notice, purpose of processing, third-party disclosure. Alerts immediately if missing.

📣

Required disclosures

Verifies industry-specific disclosures were made — cooling-off notice for insurance, risk warnings for financial services. Configurable per-industry keyword sets.

🔍

PII mention detection

Flags when individual numbers, account numbers, or health insurance IDs are spoken aloud. Transcript PII is automatically redacted before storage or export.

⚠️

Prohibited language & violations

Detects use of prohibited phrases, inappropriate sales language, or regulatory violations. Violation counts are aggregated by agent and team.

PII scrubbed before it reaches storage

Transcripts pass through the PII redaction pipeline before being sent to OpenAI. Admins control role-by-role access to raw transcripts — the redaction diff view is restricted to authorised QA reviewers.

  • Auto-masking before OpenAI API calls
  • Raw transcript access restricted to admin / QA roles
  • Diff view comparing raw vs redacted (permission-gated)
  • Consent status changes written to immutable audit log

Redaction diff example

Raw (before)

Customer's policy number is PL-2024-00912, date of birth 15/03/1978. Confirmed.

Redacted (stored & sent to LLM)

Customer's policy number is [POLICY_NO], date of birth [DATE_OF_BIRTH]. Confirmed.

Audit-ready evidence at the click of a button

PDF audit reports, JSON, and CSV all include full consent change logs and evaluation scores.

📄
PDF
Audit profile
For regulators & internal audit
{ }
JSON
Structured data
For SIEM and BI integration
📊
CSV
Spreadsheet
For ad-hoc analysis

APPI & GDPR Data Subject Rights (DSR)

Process data access and deletion requests under APPI §28 and GDPR Art. 17 directly from the admin panel. Every action is written to the immutable audit log.

📂

Access Requests

Manage personal data access requests with workflow tracking, deadline monitoring, and exportable evidence.

🗑️

Deletion Requests

Process erasure requests covering calls, transcripts, and analytics results. Deletion actions are permanently recorded in the audit log.

📋

Full Audit Trail

Every DSR action is written to an immutable audit log — automatically generates evidence that stands up to regulatory inspection.

🛡️

See a live compliance exception report

In our demo we use real call data to walk through APPI violation detection, consent tracking, and audit export.

Book a demoRead security details