Frequently Asked Questions

DAIOS (Dynamic AI Operation Service) is an automated virtual operator that integrates with your CMS software. When an alarm triggers, DAIOS considers the options and then engages your contacts on your behalf, whether by phone (IVR or AI voice), SMS, email, or chatbot. DAIOS captures their response and runs a structured plan to resolve the activation, escalating to a real operator when appropriate.

DAIOS can handle any alarm or event type: Late to Close, Open Out of Hours, low battery, environmental, system, intruder, fire, or anything your CMS raises. You decide which event types DAIOS picks up and which it leaves to your operators.

It also supports "engage-only" actions, which are one-off DAIOS engagements an operator can trigger from inside an existing activation. With one click the operator can have DAIOS make an IVR call, an AI voice call, or open a chatbot session with a chosen contact, and record the contact's response into the activation.

Typical pickup is under 5 seconds from the moment the alarm reaches our server. Engagement (placing the call or sending the SMS) follows within seconds of pickup, subject to any configured delays in your plan such as sleeping activations.

DAIOS is built to handle tens of thousands of activations a day. Resources can be increased on demand to ensure fast management of all DAIOS activation requests.

Yes. Operators can claim an activation at any time, even mid-engagement. The CMS is the source of truth for ownership, so the moment DAIOS sees a non-DAIOS operator on the activation, DAIOS stands down.

By default, in-flight engagements are left running (the contact's chatbot session, SMS thread, or voice call continues unchanged), but the plan ladder is paused, so DAIOS will not advance to the next contact or channel. This avoids cancelling a conversation the contact is mid-way through when the operator just wants to claim ownership.

If a company prefers a hard-cancel, where all in-flight engagements stop the moment an operator picks up, that can be enabled by toggling "Cancel engagements on stand-down" in Company Settings.

Important: once an operator has touched an activation, DAIOS is permanently passive. Even if the operator releases the activation back to the queue, DAIOS does NOT resume the plan; it waits for the CMS to mark the activation completed.

DAIOS continuously syncs each managed activation's status from the CMS. If the activation restores, an operator manually completes it, or it auto-completes, DAIOS detects that on the next sync (typically within a few seconds) and unwinds itself:

• Any in-flight call, chatbot session, SMS, or email engagement is gracefully ended.
• Contacts already engaged are notified that the alarm has been resolved where the channel supports it.
• A response note is logged into the activation explaining how the CMS resolved it.
• Ownership is released and the job moves to "completed" inside DAIOS.

The plan or DAIOS will exhaust the contact list, then escalate per your configuration: to an operator queue, a fallback contact, or another engagement notification. Every contact and fallback is followed through.

DAIOS uses one of two engagement modes per customer:

DAIOS mode: the system reads the alarm context, contact list, and response plan details, and can also weigh prior history and contact instructions, to choose the best contact and channel automatically. Each Response Plan can carry custom DAIOS instructions to override defaults per alarm type.

Response Plan mode: choose from a preset list of, or custom, step-by-step DAIOS Response Plans.

Both modes share the same safety controls, audit logging, and override paths.

Yes. Each contact can have multiple channels with priorities, and your plan defines the order DAIOS works through the contact list. If contact A does not answer on any of their channels, DAIOS moves to contact B, and so on, up to the maximum-contacts limit you've configured. Plans can also include wait steps and retry loops, for example: "try contact A, wait 10 minutes, try contact A again, then move on."

Yes. Parallel engagement is supported, which is useful for duress or critical events where you want every nominated contact notified simultaneously rather than sequentially. The first to respond drives the resolution; the rest are notified that the event has been handled.

Yes. Contact availability windows configured in the CMS are honoured. CMS contact schedules and Response Plans are used to handle contact scheduling, so out-of-hours contacts aren't disturbed unnecessarily.

DAIOS can delay engagement on sleeping activations that may be expecting a restore, disarm, arm, or autocomplete. If the activation is woken, DAIOS can react immediately; otherwise DAIOS can wait for a fixed time window, or a combination of both. The default behaviour is configurable per company and can be overridden per response plan with the DAIOS SLEEP instruction.

DAIOS detects voicemail and treats the attempt as unanswered. It does not leave sensitive details on voicemail unless you specifically configure it to. It then falls through to the next channel or contact per your plan.

Yes. Every Resolution Group can include a "transfer to operator" option. On the IVR or AI voice call the contact says (or presses) the matching option, on the chatbot they tap a button, and on SMS they reply with the keyword.

On voice channels, if a Call Back Number is configured, DAIOS bridges the live call to it immediately. When the operator answers, Twilio plays a short private whisper announcing the contact's name, number, and the alarm type, then joins the operator to the call. The dial outcome is posted back to the CMS as a follow-up note.

Yes. When a contact responds to a Late-to-Close or Out-of-Hours alarm with an extend, cancel, or open-early request, DAIOS can post that change straight to the CMS schedule via the API, with no operator action required. Supported codes: LTC Extend 15/30/60 min, LTC Cancel, OOH Extend 15/30/60 min, and OOH Open Early. If the change cannot be applied, DAIOS retries briefly then escalates to an operator with a clear explanation.

Both. The standard path is reactive: the CMS pushes an alarm and DAIOS handles it within seconds. In addition, Activation Selectors let DAIOS proactively scan your open activation queue and pull in activations that match a filter you define, such as a given action plan, site grouping, city, alarm type, or priority.

Selectors can run in a log-only "shadow" mode first so you can see exactly what they would pick up before they act, and only ever consider unclaimed activations.

Yes, two-way on every channel that supports it: IVR (key presses and spoken responses), AI voice (natural speech), SMS and email (reply-to conversations), and chatbot (full AI dialogue). The contact's reply is always recorded against the activation.

Yes. Voice scripts, SMS templates, email templates, and chatbot system prompts are all configurable per plan, with placeholders for site name, alarm type, time, and so on. The voice provider and voice persona used on calls can be selected per company, and the contact-facing chatbot can be re-branded with your customer's logo and colours.

DAIOS uses Resolution Groups to define exactly what choices a contact is offered. Preset groups cover common scenarios; custom groups can be built to match your specific workflows:

Standard: acknowledge and complete, confirm false alarm, handle themselves, or escalate to operator.
LTC: standard options plus closing-time extensions (no operator needed).
Custom: duress confirmations, environmental thresholds, dispatch requests, and more. Configured per company on request.

The AI on chatbot and voice will only accept responses that map to a configured option; anything else triggers a polite refuse-and-relist.

Yes. Per-company branding includes a logo URL, an accent colour, a display name, and an opt-out on the "Powered by DAIOS" footer. These apply to the chatbot page, the chatbot notification email, and the browser-tab favicon on contact-facing pages. Your customers' contacts see your monitoring centre branding, not DAIOS.

Voice AI is a completely separate channel from IVR. Where IVR uses a fixed key-press menu, Voice AI uses an AI agent that speaks to the contact in natural language and listens to their spoken response. The contact does not need to press any keys; they can say their answer aloud.

Both IVR and Voice AI are available as channel options, so you can use both side by side or pick whichever suits each customer's preference.

No. The options the AI offers come directly from the Resolution Group configured for that engagement. If the contact asks for something off-list, the AI refuses politely and re-states what they can choose from. This guardrail is enforced on both the chatbot and the AI voice agent.

Voice AI handles the "wrong person answers" case cleanly. If the person who picks up says something like "no, this is Matt" or "you have the wrong number," the AI politely acknowledges and resolves the engagement as NEXTSTEP_WRONG_PERSON. DAIOS records "Reached a Different Person" on the CMS activation and advances to the next viable contact.

Yes. If a Call Back Number is configured for the company, DAIOS bridges the live call to it the moment the contact asks. When the operator answers, Twilio plays a short private whisper announcing the contact's name, number, and the alarm type, then joins the operator. The dial outcome is posted back to the CMS as a follow-up note.

Yes, where call recording is enabled. The AI voice transcript and call recording are saved alongside the engagement detail and linked back to the CMS activation. CMS staff can open the link directly from the activation notes to review the full conversation, listen to the recording, and see the outcome.

Yes. The following are configurable per company: the legal disclosure preamble (required in many jurisdictions when AI handles a call or it's being recorded), the verification prompt wording, the message played after a failed verification, the maximum verification-attempt count, and the AI voice persona. Eight OpenAI voices are available: alloy, ash, ballad, coral, echo, sage, shimmer, and verse. PIN entry accepts either spoken digits or keypad (DTMF), whichever the contact prefers.

DAIOS supports two client-level alternates accepted on every channel: an OK Password and a Hold-Up (Duress) Password. A Hold-Up match looks identical to a normal verified response to the contact, who sees no behavioural difference, but behind the scenes DAIOS silently logs an AUDIT_SECURITY event, posts a DURESS CMS note, and escalates the activation to the operator queue. No log or transcript ever names which credential matched, so the covert path stays covert.

DAIOS fails gracefully rather than leaving dead air. If the AI provider can't start or sustain the conversation, say because of an account quota issue or a provider outage, the contact hears a short spoken apology and the call ends cleanly. The activation advances to the next channel or contact per your plan, a clear note is recorded, and DAIOS flags the provider problem on its internal health dashboard so administrators are alerted before it affects more calls.

Yes. When an alarm triggers, only the ticket ID is sent to DAIOS. DAIOS then uses the secure token-based CMS REST API to retrieve the data needed. DAIOS runs on dedicated, hardened Linux servers with firewalled access, encrypted database storage, signed inter-service communication, and per-tenant data isolation.

Data retention can be set to years, months, or weeks, or data can be deleted as soon as each request is completed. Dedicated servers per company or per-customer database isolation are available. See our full Security page →

Yes. Disk-level encryption is enabled on all servers. Every external connection is encrypted in transit (TLS). Each customer's operational data is held in its own isolated database with no cross-tenant query path. Every meaningful action is recorded in a tamper-evident, hash-chained audit log.

Three parties only:

You: every user you authorise on your side, scoped by role.
DAIOS staff: only authorised DAIOS staff, only when needed for support or troubleshooting, and only under your written instruction. All staff access is logged in the audit trail.
Nobody else: we do not sell, share, or use your data for any purpose outside of running the service.

Retention periods are configurable per company. Default periods:

• Live operational data: your custom retention period. Deletion on request at any time.
• Audit logs: 90 days online, archived for 2 years.
• Backups: 30 days rolling.
• On offboarding: a full export is provided, then all data is purged within 30 days.

Yes. DAIOS supports per-contact PINs or verification codes that the contact must enter before any activation or contact information is disclosed.

The PIN is derived from the contact's data already held in your CMS, so you don't need to maintain a second credential set. Failed attempts are limited (configurable, default 2) and logged. If the contact fails verification, DAIOS treats the channel attempt as failed and falls through to the next contact or channel, with the failure recorded in the audit log.

This means that even if a contact's phone is answered by the wrong person, whether voicemail, a family member, or a stolen handset, your alarm details remain protected.

Yes. Every meaningful action, including logins, configuration changes, activations being processed, manual overrides, and plan edits, is recorded in a tamper-evident, hash-chained audit log. Admins can search, filter, and export the log at any time from the admin panel.

Yes. For customers with strict data-minimisation requirements, DAIOS offers a per-company High-Security data-handling profile. When enabled, shortly after each activation closes, DAIOS automatically pseudonymises all identifying data it holds:

• Contact names become labels ("Contact 1"); phone numbers and emails are masked
• Addresses and free-text notes are removed
• Verification secrets (PINs, OK and duress passwords) are cleared
• Conversation transcripts are not retained; call recordings are deleted
• Business/account name is removed from the audit log

What is kept (non-identifying): ticket number, account number, site city and state, resolution, timings, and channel/outcome, enough to reconcile against the full record your CMS already holds.

Pseudonymisation is one-way: once applied, original values cannot be recovered from DAIOS. Read more about High-Security mode →

Yes. Administrators can permanently purge all completed activation history within a chosen date range, removing records across both the decision platform and the engagement engine, including any call recordings. This is a deliberate, type-to-confirm action and is itself recorded in the audit log. Active (in-progress) activations are never touched.

DAIOS is hosted on professionally managed cloud infrastructure in the Sydney, Australia region. Your operational database (isolated per customer) and the application run on servers in that region. Dedicated servers or alternative-region hosting can be arranged on request.

If DAIOS cannot be reached, the DAIOS Task Plugin tries the backup connection path. The Task can queue activations and retry until DAIOS recovers, then send through queued activations. The DAIOS Heartbeat Account monitors connectivity and raises an alarm in your CMS if DAIOS stops responding, so your control room staff are notified before an issue affects live alarms.

Standard (included): rolling 30-day automated backups of every customer database, off-host backup storage, containerised deployment (spin up from latest backup in a short window), and a 99.5% monthly uptime target.

Enhanced options available: managed database with automatic failover, more frequent snapshots, multi-region backup replication, hot standby server, load-balanced multi-server deployment, and higher uptime SLA targets. See full redundancy options →

Yes. Every DAIOS engagement and significant action is written back into the CMS as a Response Note on the activation, covering contacts being engaged, the contact's response, channel fallbacks, decisions DAIOS has made, and operator overrides. Your monitoring centre staff see the full timeline directly in the CMS, without switching systems.

Yes. Alongside the Response Note, DAIOS posts a secure link back to the CMS that opens a detail view of that engagement. From the link your CMS staff can review the full chatbot conversation history, the IVR call flow and which option the contact chose, the AI voice transcript and call recording (where enabled), the notification content sent, and timestamps and outcome.

These detail links can be protected by a CMS-side password so that even if a link is forwarded or copied, only authorised CMS users can open it.