Early access, honest gaps
Contacts for agents,
leased not given.
ContactsQ is the address book your Quox agents work from. They find people, check whether they may contact them, and ask to call or email. They never hold the number or address: the phone bridge or email sender redeems a single-use lease, and every use is witnessed.
In plain words
What it is, where it lives, when to reach for it
- What is it
- An address book for your Quox agents that lets them reach people without ever holding a phone number or email address.
- Where do I use it
- In the ContactsQ tab of your Quox dashboard, through the ContactsQ agent, or with the quox contacts command.
- When would I use it
- When an agent needs to call or email someone and you want a consent check and your approval first.
- How do I use it
- Add or import contacts, then ask an agent to call or email by name. You approve and the transport completes it.
The problem
Agents that hold your contacts hold your risk.
The usual way to let an agent call or email someone is to hand it the number or address. From then on it sits in prompts, logs and caches, and nothing stops the agent approaching someone who asked not to be contacted.
ContactsQ keeps the number and address out of the agent entirely. The agent works with a masked card, asks to reach the person, and the transport redeems a lease after the consent and reachability check. Others have built privacy vaults for model prompts. What ContactsQ adds is the lease redeemed by the transport and the reach check on every approach, inside an agent platform that records evidence.
Pasting phone numbers into a chat so an agent can call someone
Say the name. The agent finds the contact; the phone bridge gets the number from a lease, the agent never does
An agent that emails someone who objected last week
Every approach passes the reach check: objections, do-not-contact, quiet hours and marketing consent
Audit logs full of customer phone numbers
The evidence trail carries ids and reason codes only, and a CI check fails the build if a number or name ever appears
Erasure requests that mean hunting through tables
Crypto-shred erasure with a verifiable certificate, and a tombstone that stops the number being re-added
What it does
Every area, each tagged honestly.
Lease = a single-use, short-lived permission to use one number or address, redeemable only by the transport. Reach check = the consent and contact rules every approach must pass. SHIPPED means proven live. IN DEVELOPMENT means built and tested but not yet driven live. PLANNED means not built.
Leases, not numbers.
SHIPPEDSingle-use, five-minute leases for dial, send and context. Only the transport (the phone bridge or the email sender) can redeem one. Proven with a real call and a real email.
Approval before contact.
SHIPPEDAn agent's call or email files an approval card that names the person, never the number.
IN DEVELOPMENTStanding grants: let a named agent reach people without asking each time, within a daily cap. A grant never overrides consent or do-not-contact.
Reach rules.
SHIPPEDA built-in UK PECR and GDPR rule set: quiet hours from 21:00 to 08:00, marketing consent, objections, and do-not-market inherited from an employer. It encodes defaults, not legal advice.
PLANNEDRule sets for other jurisdictions. UK only today.
Encrypted by design.
SHIPPEDPer-contact keys. Search by exact number or email without storing it readable. Sound-alike name search that asks when two names match instead of guessing.
Voice.
SHIPPEDGreet known callers by name, and dial by name through the Quox phone bridge.
GDPR operations.
SHIPPEDErasure with a certificate, and subject access export.
IN DEVELOPMENTAutomatic clean-up of unknown callers after a retention period. Off by default.
Who emailed you.
SHIPPEDInboxQ shows the sender's contact card.
IN DEVELOPMENTCalendarQ attendees as contacts.
Import and tidy.
SHIPPEDCSV and Google Contacts export import, duplicate merge with undo, and facts with a guard that keeps health, religion and similar sensitive facts away from agents.
IN DEVELOPMENTExports from iCloud, Android, Outlook and LinkedIn, with photos.
Live sync.
IN DEVELOPMENTOne-way sync from iCloud and other CardDAV address books. It never writes back, and a deletion upstream flags the contact rather than erasing it.
Operate it your way.
SHIPPEDThe ContactsQ agent beside your address book, the quox contacts command line (add, search, call, brief, import, merge, erase, dsar, sync), and a Claude skill.
Work alongside an attached agent.
SHIPPEDA Claude Code session can attach as the ContactsQ agent and work under its identity. It opens with a morning brief (people to review, consents about to lapse, overdue notices), proves its own tools with a self-test, sees the contact you have open in the dashboard, and leaves an encrypted note on each person with an open thread, shown on their record.
IN DEVELOPMENTOne approval for a batch: up to ten calls or messages on a single card. People the reach rules refuse are listed and left out, and each one is checked again at the moment you approve.
Still to come.
PLANNEDGoogle and Microsoft account sync, TPS and CTPS screening, a self-service portal for the people in your address book, and enrichment.
The product, not a mockup
Real captures, from the running dashboard
Captured from the live dev instance with a fictional contact. Annotated, not edited.
- 1Masked detailsThe number and address show masked. Agents never see more; the phone bridge redeems a single-use lease for the real value.
- 2Name and organisationEvery contact has a name and an organisation, with the job title.
- 3Open threadsA note the agent left for the next session, stored encrypted and shown on the record.
- 4CallCalls go through the phone bridge with a lease, never by handing the number to an agent.
- 5The ContactsQ agentAsk about people in your own words, beside the address book.
Captured from the real ContactsQ page. The contact is fictional.
On the command line
The same address book, scriptable.
These are the real commands. A call still files an approval before anything is dialled.
quox contacts add --given Sarah --family Lee --organisation "Acme" --job-title CTO
quox contacts search "sarah"
quox contacts call <id> --reason "Follow up on the quote"
quox contacts brief
quox contacts dsar <id> > dsar.jsonWhat it does not do yet
What ContactsQ does not do yet.
ContactsQ is early access. These are the limits you will hit today.
Live sync has not met a real iCloud account
The sync is built and tested, but it has not yet run against a real iCloud address book.
Standing grants, batch approval and retention clean-up are not driven live
All three are built and tested. None has been driven live yet.
UK rules only, and not legal advice
The reach rules encode UK PECR and GDPR defaults. They are not legal advice, and other jurisdictions are planned.
Pricing
Pricing to be announced.
Pricing has not been decided. Nothing on this page is a quote.
ContactsQ
Let agents reach people. Never hand them the number.
Leases redeemed by the transport, a reach check on every approach, and your yes before anyone is contacted.