Voiceflow

Authenticated action into arbitrary third-party systems is a published build step rather than a fixed connector list: Voiceflow states that agents integrate with third-party services and APIs using Voiceflow Functions and API blocks, and that teams build custom logic, actions and integrations with the full power of code, APIs and JSON.

Because the route is a general API block plus custom code, breadth is bounded by what the customer can call rather than by a catalog, and a separate integrations directory is published alongside. Credentials are handled as a first class concern, with App Credentials stored encrypted and API keys never surfaced in agent logs.

Sourcevoiceflow.com/features/platform-overviewread 2026-09-05

Two orchestration modes are published side by side. Workflow Builder handles multi-step tasks as scripted flows the agent calls that execute in order every time, described by Voiceflow as the route for ultimate control; Playbooks carry natural-language instructions for complex tasks the agent executes, which is the reasoning-led alternative.

Beneath both sits a documented step vocabulary on the canvas covering agent, prompt, capture, condition, set and end steps, so branching, variable assignment and termination are all first-class, with reusable Components carrying a sequence such as authentication across agents.

Sourcevoiceflow.com/features/workflowsread 2026-09-05

A maintained retrieval structure the customer curates and can point at, rather than context assembled per request.

Knowledge Base ships as a named product with its own feature page: teams import data and documents into it so agents respond using curated data, and it is described as training agents on the customer's own data to power responses and perform tasks using any LLM model.

The build sequence Voiceflow publishes puts building the knowledge base first, before workflows and integrations, and the Content Management System curates agent content, components and logic so it scales across teams and use cases.

Sourcevoiceflow.com/features/knowledge-baseread 2026-09-05

No runtime oversight of agent actions is documented: no handoff or escalation to a human agent, no approval step before sending, and no policy threshold that pauses a sensitive action. The controls that do exist sit around the run rather than inside it. Staging and stakeholder review before production is a release gate, and SSO with advanced user permissions is an administrative control; neither holds an agent action at run time.

Voiceflow's own security page lists SOC 2 Type II, ISO/IEC 27001:2022 with the version stated, GDPR and HIPAA, each badge linking to a trust portal, alongside annual external penetration testing, continuous vulnerability scanning, automated and manual code review, and a published vulnerability disclosure policy with safe harbor and a bug bounty.

For customers, SSO with SAML and roles and permissions are documented as their own workspace administration sections, with granular access controls, audit logging and alerting, encryption at rest under customer-managed keys, and full project history with rollback. Infrastructure sits on AWS and GCP with multi-AZ databases, point-in-time recovery, TLS and mTLS in transit, and a CDN-backed WAF. That portal sits at trust.voiceflow.com.

Sourcevoiceflow.com/legal/securityread 2026-09-05

Transcripts and Analytics ship as their own sections under Monitoring Agents, the security page lists audit logging and alerting as a platform property alongside full project history tracking with rollback, and Environments and Backups give a record of what was deployed when. Whether a transcript reconstructs a run at step level, with the blocks traversed, the tool calls made and the retrieval performed, is not shown.

Sourcevoiceflow.com/legal/securityread 2026-09-05

No memory, saved state or persistence layer is documented. The Set step assigns variables within a flow, which is session state rather than a memory layer, and the Knowledge Base is a curated corpus for grounding answers rather than a memory the agent keeps.

A different hosting arrangement is available by negotiation rather than as a published option. The privacy policy states at section 7 that Voiceflow is based in Canada and may host, transfer and process data in Canada and other countries, then qualifies it: "unless we expressly agree otherwise". That makes a different hosting arrangement obtainable by contract, with enterprise negotiation as the gate.

No region is named or selectable, and no VPC, single tenant or self hosted option is published. The security page describes multi-AZ databases, cross-region backup and infrastructure on AWS and GCP, which is redundancy engineering rather than a location a buyer chooses. Voiceflow keeps a trust portal at trust.voiceflow.com.

Sourcevoiceflow.com/privacyread 2026-09-05

Packaged assets exist and are adopted across agents, but the customer builds them.

Reusable Components hold a sequence such as an authentication or intake flow and are reused across agents and channels, the Content Management System curates agent content, components and logic so they scale across teams and use cases, and projects and functions can be exported and imported between workspaces, which is a real adoption route.

Every one of those assets originates with the customer. No vendor supplied catalog of prebuilt agents or templates a buyer browses and puts into service is published, and the industry and solution pages describe use cases rather than adoptable units.

Sourcevoiceflow.com/features/agent-cmsread 2026-09-05

Breadth across text, voice and messaging with the interface left open. Voiceflow ships a web chat widget and, through the Dialog API, deployment into any custom interface, with worked documentation for Slack, Microsoft Teams, Discord, Telegram, Twilio SMS, WhatsApp and Shopify.

Voice is a first-class channel rather than an add-on: the documentation carries its own voice section covering voice settings, voice input, call recording, custom voice actions and SIP functionality, and Voiceflow publishes a 50ms platform latency figure against telephony use. Solution pages cover answering service, call center and virtual receptionist, which are inbound telephony products.

Sourcedocs.voiceflow.com/docs/faqread 2026-09-05

The customer chooses the model. Voiceflow publishes "Use any model" as a named platform property: any AI vendor, including OpenAI and Anthropic, can power agent responses, logic and actions, and the Knowledge Base is described as training agents on the customer's data to power responses and perform tasks using any LLM model. Model choice sits with the buyer at build time rather than with Voiceflow, and the same page frames the whole platform as building agents using any models and integrations.

Sourcevoiceflow.com/features/platform-overviewread 2026-09-05

The platform is callable from outside through documented interfaces. Voiceflow publishes a Dialog API for launching agents into any custom interface, a separate API reference alongside the documentation and changelog, and a Voiceflow CLI with its own install and authentication sections under Developer Tools.

Agent API keys are issued per agent from the agent settings, so a third party can authenticate against a specific agent rather than only through the console.

The documentation carries worked custom-interface examples built on those APIs for Slack, Microsoft Teams, Discord, Telegram, Twilio SMS, WhatsApp, Shopify and Unity, and Voiceflow frames a developer platform as an explicit product pillar for extending the platform with custom features, integrations and interfaces.

Sourcedocs.voiceflow.com/docs/faqread 2026-09-05

Production pipelines let teams test agent builds in staging and share them with stakeholders for feedback before production, a Test Tool ships as its own interface section, prototypes can be shared for review, and Environments and Backups separate what is being worked on from what is live. That makes a quality gate with human judgment at the end of it. The documentation also names an Evaluations section under Monitoring Agents; whether it produces a score, pass rate or judge verdict against a scenario set is not shown.

Sourcevoiceflow.com/features/platform-overviewread 2026-09-05

No browser control, hosted session, virtual desktop or computer use is documented. The route out is stated positively and it is programmatic: agents reach third-party systems through Voiceflow Functions and API blocks and reach end users through the web chat widget, the Dialog API and telephony, and the platform's own framing is a developer platform for custom integrations and interfaces rather than an agent operating a screen. A native web search tool is retrieval, not computer use.

Sourcevoiceflow.com/features/platform-overviewread 2026-09-05