CallScope is a product of Belton IT Nexus, New Zealand owned and operated Hosted in NZ or AU, or on your own servers · [email protected]
CallScope by Belton
CallScope for government

Contact-centre insight with public-sector assurance.

Agencies are judged on how they answer the public. CallScope gives your contact centre live operational insight, and gives your security, privacy and audit teams the controls and evidence a public-sector procurement expects.

CallScope Compliance register: mandatory, preferred and low-priority requirements met, with responses across all requirements
What CallScope does for you

Operational insight your assurance teams can sign off.

Identity and access

Microsoft Entra ID single sign-on, two-factor for administrators, and role-based access enforced on the server, deny by default.

Tamper-evident audit

Append-only, hash-chained audit log, a printable audit report and optional SIEM export.

Data sovereignty

Onshore hosting in New Zealand or Australia, or inside your own environment.

AI under control

Off by default, onshore options, offshore services blocked, and a person always in the loop.

Privacy obligations

Card numbers stripped from transcripts, sensitivity tiers, retention with daily purge, and erasure on request.

Procurement evidence

A built-in compliance register and control mapping to NZISM, Essential Eight and ISO 27001.

Evidence, not claims

Answer the security questionnaire with evidence.

The built-in compliance register tracks tender requirements and framework controls, and the audit report gives assessors a live view of the evidence.

  • Tender checklist with responses for every requirement
  • Framework pages for the standards you are assessed against
  • Audit report with an integrity check of the audit chain
CallScope Compliance register with tender checklist and requirement responses
Service performance

Report service to the public with confidence.

Service level, speed of answer, abandonment and first-contact resolution, by queue and period, with every figure traceable to the calls it counted.

  • Health score out of 100 with the issues behind it
  • Click-through figures that open the exact calls
  • Saved weekly reports frozen as a fixed record
CallScope Reports volume tab with calls per day for the last 30 days
Full call register

A complete, searchable record of every call.

Calls rolled up from 3CX segments into the calls people actually made, filterable, exportable and searchable, with recording playback audited.

  • Filter and bookmark by queue, team, direction and status
  • Transcript search where 3CX transcription is enabled
  • Recording playback for administrators, every play audited
CallScope Call Log listing calls with direction, agent, queue, wait, talk time, status and sentiment
Assurance

Designed for a public-sector security review.

We tell you exactly what is in place, what is in progress and what is not held. No overclaiming.

Your boundary

Self-host inside your own environment, or use an onshore Belton instance.

Encrypted backups

Nightly AES-256 encrypted backups with an optional immutable offsite copy.

Controlled API

Scoped, expiring read tokens with rate limits and an OpenAPI specification.

Read-only

CallScope never changes your 3CX routing, queues or extensions.

Security and compliance detail →
Frequently asked

Questions from government agencies.

Is CallScope certified to ISO 27001 or assessed under IRAP?

No. CallScope is designed around the controls in ISO 27001, NZISM and the Essential Eight, and Belton has self-assessed against them. We do not claim certifications we do not hold. During procurement we give you the control mapping and tell you exactly what is in place, in progress and not held.

Can CallScope run inside our own environment?

Yes. CallScope runs as a standard container stack on your own servers and network. For highly sensitive or isolated networks we scope a deployment with no outbound services, and AI features stay off or use a model you host.

How is AI governed?

AI is off by default. When enabled you choose the provider: Belton's own self-hosted model, a model you host, or Azure OpenAI in Australia. Offshore AI services are blocked in code unless the deployment explicitly allows them. AI findings are inputs for a person to review, never automatic actions, and AI output that fails validation is refused and audited.

Can the audit log go to our SIEM?

Yes. The audit log can be shipped as RFC 5424 syslog over TCP or TLS every few minutes, or pulled as NDJSON. Within CallScope the log is append-only and hash-chained, with a one-click integrity check and a printable audit report.

Bring us your security questionnaire.

Tell us about your environment and your assurance requirements, and we will show you how CallScope meets them.