Everything Heimdell does, in one place

From the first sale to the final cancellation: how customers confirm, what gets recorded, and how it fits into the way your team already works.

AI phone verification

An independent, conversational verification call that sounds like a person and keeps records like an auditor.

Eight-stage conversation: Identity, sign-up, personal details, product, terms, policies, Direct Debit and explicit agreement, in a fixed order the agent cannot skip.
Word-for-word policy reading: Your terms and policies are read exactly as written. Questions are answered only from your wording.
Live corrections: If the customer says a detail is wrong, the correction is captured on the call and flagged for review. Account numbers are never auto-changed.
Outcome routing: Calls that don't complete are sorted into follow-up queues: objection, terms not understood, bank mismatch, sign-up unconfirmed or stop requested.
Recorded and transcribed: The call recording and the full turn-by-turn transcript are attached to the evidence.
Completion email: The customer receives a detailed summary of exactly what they confirmed.

Reach every customer the way that works for them, and chase the ones who don't respond without lifting a finger.

Secure link: Hosted confirmation page delivered by SMS or email, with a QR code for face-to-face sales.
AI phone call: Outbound verification call, charged only when you send it.
Embedded widget: A script for your CRM or checkout, with signed, single-use, expiring tokens and an origin allowlist.
API: Create verifications from any system that can make a web request.
Automatic fallback: Set a primary channel and up to two fallbacks per template. If the customer hasn't responded after 2 to 20 minutes, Heimdell resends or flags the sale for follow-up.

Evidence doesn't stop at sign-up. Every change after it gets its own trail.

Ten lifecycle events: Verified sign-up, trial ending, renewal approaching, renewal completed, price change, contract change, payment change, cancellation initiated, cancellation confirmed and cooling-off.
Re-verification for material changes: Price, contract and payment changes send the customer a fresh confirmation and produce a second certificate.
Lightweight notices: Other events send a notice the customer can acknowledge in one tap, without re-reading the whole agreement.
Per-template rules: Choose which events need full re-verification and which need a notice.

Build what the customer sees once, then reuse it on every sale.

Ten agreement types: Telecom sale, subscription, Direct Debit, subscription with Direct Debit, recurring card, membership, service agreement, renewal or change, equipment hire and custom.
Four verification levels: Quick, Standard, Enhanced and Full TPV, so the friction matches the risk.
Locked once published: Published versions can't be edited. Changes create a new version, so every certificate shows exactly what that customer saw.
Protected key terms: Price, billing frequency, minimum term, auto-renewal and cancellation always use system wording. A seller can't soften them.
B2C and B2B: Business agreements record the company, the representative, their role and an explicit declaration of authority.
VAT handling: Prices can be shown inclusive or exclusive of VAT, and the certificate records which.

One certificate you can hand to a complaints team, a bank or a regulator.

SHA-256 sealed certificate: Every completed verification produces a certificate fingerprinted with a SHA-256 hash, so any later change is detectable.
PDF download: Download any certificate as a PDF in one click.
Consent event timeline: An append-only record of each step: terms acknowledged, Direct Debit authorised, data corrected and more.
Exact version snapshot: The template version, the wording shown and the acknowledgements accepted are frozen into the certificate.
Policy snapshots: Your terms, cooling-off and privacy wording are captured as they stood at the moment of sale.

Managers see everything. Sellers see their own deals. Nobody sees what they shouldn't.

Three installable apps: Separate Company, Client and Seller apps that install on phones, tablets and desktops.
Role-based access: Owner, manager, seller and compliance-viewer roles, each scoped to its own company.
Analytics: Completion rate, average completion time, abandonment and breakdowns by type, level, template and channel over 7, 30 or 90 days.
Follow-up queues: Abandoned verifications, review flags and sales needing manual follow-up, in one place.
Audit log: Who did what in your account, and when.
Ask Heimdell: A built-in assistant that drafts a template from a plain-English description and offers help when you look stuck. It proposes; you approve.

Keep working in the tools you already use.

REST API: Create verifications, record lifecycle events and fetch certificates with an API key.
Signed webhooks: Fourteen event types, HMAC-SHA256 signed, with delivery IDs and five automatic retries if your endpoint is down.
Test mode: Build and test your integration without creating real verifications.
CRM guides: Step-by-step setups for HubSpot, Salesforce, Zoho, Close, Pipedrive and GoHighLevel, plus Zapier, Make and n8n recipes.
AI-readable: An llms.txt file, a public knowledge catalog and an Agent2Agent card so AI assistants can answer questions about Heimdell accurately.

Built by a cybersecurity team, for evidence that has to stand up.

Encrypted bank details: Account numbers are AES-256-GCM encrypted at rest. Only the last four digits and a masked sort code are ever displayed.
No card data: Heimdell never collects a full card number or CVV.
Hashed keys and tokens: API keys and verification links are stored as hashes, never in plain text.
Tenant isolation: Every query is scoped to your company, with row-level security in the database as a second line of defence.
Signed phone webhooks: Every call-provider callback is signature-checked before it is trusted.
UK registered: Heimdell Tech AI Ltd, registered in England and Wales and with the ICO.

Sign up in a couple of minutes. A real person reviews every application before it goes live, and you only pay for the verifications you send.