Incident Response & Service Availability

Scope and operating authority

This notice describes SalesPitch AI’s controlled-beta operating standard. It covers the public site, authenticated application, billing evidence, customer data, lead and campaign workflows, C.O.L.T.E.N. AI™ voice, meeting and follow-up workflows, provider bridges, and release infrastructure. It does not create a service-level agreement, replace a signed order form, or override applicable law.

Detection and monitoring

Release certification checks public routes, security headers, canonical destinations, cookie boundaries, protected application routes, signed-ingest boundaries, runtime health, and provider-switch state. Application and provider evidence is designed to surface webhook failures, ambiguous provider outcomes, overdue final status, entitlement drift, suppression failures, and unhealthy bridges without publishing customer or credential data.

The Release & Trust Center reports the currently published release and bounded control state. It is not a personalized incident-notification channel.

Incident classification and response

American Business Capital Group, Inc.’s runbook uses SEV-1, SEV-2, and SEV-3 operating levels. SEV-1 includes an active or credible risk requiring immediate dispatch or calling shutdown and owner escalation. SEV-2 keeps the affected adapter or capability disabled while scope and evidence are reviewed. SEV-3 may remain contained to a failed record only when tenant, suppression, billing, and security boundaries remain verified.

Containment and provider shutdown controls

Containment favors stopping affected work over attempting an unsafe retry. Calling, email, calendar, lead-provider, checkout, and background-worker capabilities have separate readiness and dispatch gates. A lost or ambiguous provider response must not be treated as permission to repeat an external action. Suppression and stop requests continue to override future outreach while accepted provider evidence is preserved for reconciliation.

Customer and regulatory notification

American Business Capital Group, Inc. will evaluate the affected data, people, jurisdictions, contracts, providers, likely risk, and legally required timing and content. Notices will be delivered through an appropriate verified channel when required. A public release-status entry is not a substitute for a required individual notice, regulatory notice, contractual notice, or provider communication.

Service availability and provider dependencies

SalesPitch AI depends on separately operated hosting, identity, payment, carrier, AI, data, email, and calendar services. A healthy website does not prove that every provider-backed feature is enabled. The application keeps unverified capabilities locked and distinguishes prepared work from externally completed work.

Unless a signed order form expressly states otherwise, this public notice does not promise a response or restoration time, continuous availability, a particular uptime percentage, or uninterrupted provider service.

Recovery and integrity

Recovery evidence must bind the exact release, schema, backup or saved version, and reviewed integrity scope. Database restore exercises occur only in an isolated authorized environment with provider switches off. Recovery must verify tenant, suppression, billing, meeting, outbound, and audit integrity and must not restore over newer suppression evidence. A production rollback or restore is a separately reviewed operator action, not an automatic effect of a certificate.

Report a security, privacy, or availability concern

Send a concise report through the SalesPitch AI contact center or use the published security contact. Include the affected surface, safe timestamps, observed behavior, and a way to reply. Do not email passwords, API keys, payment-card data, raw lead files, or unnecessary personal information.

Privacy requests and outreach suppression should use the Privacy Choices Center so the correct review and evidence path is used.

Communications and evidence retention

Incident records should retain only the evidence needed for containment, investigation, recovery, notification, legal, contractual, audit, and security duties. Public communications are bounded to verified facts and may change as new evidence is confirmed. American Business Capital Group, Inc. does not publish secret values, raw customer records, prospect identities, provider credentials, or exploit details that would create additional risk.