Caller Whale

Security

Your records stay yours.

What protects your accounts and data, and which parts are built today and which are still coming.

  • Passwords

    Stored only as Argon2id hashes. Sessions use HttpOnly cookies, and five failed sign-ins in 15 minutes pauses the account.

    In the app now
  • One organization never sees another

    Row-level security in the database, so one organization's rows are kept apart from every other's at the database level.

    In the app now
  • Google sign-in

    On the website and in the desktop app. In the app, sign-in happens in your own browser, never inside the app window.

    In the app now
  • Two-step sign-in

    Authenticator code plus recovery codes, required for owners and administrators. Built; switched on before launch.

    In preview
  • Encrypted offline copy

    Changes made offline wait in an encrypted copy on your machine, unlocked by your passphrase, and sync when you reconnect.

    In the app now
  • No card numbers

    Checkout goes to the payment provider, and only the provider's signed notice marks a payment paid. Caller Whale never stores card numbers.

    In the app now
  • Audit log and devices

    Who did what and when, and every signed-in device you can sign out.

    Coming at launch
  • Single sign-on

    Sign in through Google Workspace or Microsoft 365 for larger teams.

    Coming at launch

Original data is never changed

Skip tracing adds columns and answers beside your values. Every list can be downloaded as it was imported or as it is after checking, at any time.

Ready to work your next list in Caller Whale?

Join the waitlist and be first in when the doors open.

Join the waitlist

Caller Whale is by invitation

Invited? Create your account with the email your invitation went to, and download the desktop app from your dashboard.

Join the waitlist

Be first to use Caller Whale, and tell us which plan fits.