Questions, answered.

TotalPath is the on-demand voice-testing platform by Nopaque. It maps the IVR and AI-voice-agent journeys you run, replays mission-critical customer journeys over real PSTN on a schedule, load-tests at scale, and turns the same runs into dated evidence-grade compliance reports against EU AI Act Article 50, FCA PRIN 2A, and Ofcom GC. One platform; four capabilities; one billing primitive.

Calls originate from genuine carrier infrastructure, dial real numbers over the public switched telephone network, and experience real network jitter, codec negotiation, and timing. Simulator-only testing misses what only the network reveals - regional routing quirks, codec mismatch, jitter-induced prompt drop. The interesting bugs almost always live in the network, not the application.

DTMF IVRs, voice-first AI Voice Experience (AVE) journeys with adaptive prompts, and conversational AI voice agents whose flow isn't a fixed tree. All three sit on the same map, share the same test types, and bill the same way.

No. Describe the journey in plain terms or import a map; TotalPath generates the test, runs the calls, and reports. Power users drop into the REST API, the Python or Node SDKs (pip install nopaque / npm i @nopaque/sdk), or the MCP server for chat-driven runs.

No. TotalPath dials your existing phone number over the PSTN. No SDK on your platform, no firewall changes, no vendor co-operation required.

Every workspace gets free monthly capacity for mapping, testing, and light load - no card required. When you outgrow it, top up PAYG per-second, or move to a pre-purchased contract for ~40% off list. The free tier resets monthly.

PAYG bills you by the second of actual call time, from your workspace balance. Run a 50-call, 30-second burst and you pay for 25 minutes of compute. Scale to thousands of concurrent calls with the same authoring and the same pricing primitive. No peak commitment, no annual minimum.

Per number, per cadence. Monthly cadence is £800/number, fortnightly £1,500/number, weekly £2,500/number. Every plan includes dated signed reports against EU AI Act Article 50, FCA PRIN 2A, and Ofcom GC, plus a founder-led monthly review call. Three-month minimum, breakable. First 5 firms get founder access.

Yes. Pre-purchased contracts come at roughly 40% off list rates and suit teams who want budget predictability. They sit on top of the PAYG primitive - your team uses the same APIs, SDKs, and console; you just don't pay per second on top of the contract amount until you exceed it.

Create a workspace API key in Settings, drop it into your CI secrets, and use either the Python or Node SDK (pip install nopaque / npm i @nopaque/sdk) or a raw curl against api.nopaque.co.uk. A two-step pipeline kicks off a mission test and waits for the result, blocking the merge on regression. The ergonomic nopaque-cli wrapper lands Q3 2026.

Full coverage of the REST API surface - mapping, testing, mission tests, load, compliance scans - plus convenience helpers like run.wait_until_complete() and run.assert_no_regression(). Auth is via workspace API key. Both SDKs are generated against the OpenAPI 3.1 spec at /openapi.json so they always match the live API.

Not yet. The nopaque-cli ergonomic shell wrapper lands Q3 2026. Until then, the Python SDK works fine from a Bash one-liner (python -c "import nopaque; ...") which is what most teams adopt in CI today. Go and Ruby SDKs follow the CLI.

The MCP server at mcp.nopaque.co.uk exposes 14 curated tools spanning mapping, testing, and compliance. Connect Claude, Cursor, or any MCP-compatible agent; auth uses the same workspace API key as REST. Tools are curated and safe-by-default - there is no “drop all data” surface. Discovery is published at /.well-known/ (agent-skills, agent-card, OAuth resource metadata) so downstream agents can integrate without manual configuration.

Any E.164-formatted number you own or have permission to test. TotalPath is carrier-neutral - we dial out from genuine carrier infrastructure and reach whatever PSTN gateway your provider routes to. UK is the primary market today; international numbers can be dialled but may carry additional per-call charges. Dedicated localised dialling and in-region data residency for non-UK customers is on the roadmap once we've validated product-market fit further.

Recordings are stored per workspace, signed-URL-gated, with configurable retention. Today we don't strip PII from transcripts - recordings contain what the call contained; storage and access controls are how we manage that. A DPA isn't a standing document yet; we'll draft one with your legal team on first request. Email info@nopaque.co.uk to start that conversation.

AWS eu-west-2 (London). All TotalPath data is in-UK today, including for international tests. Localised residency for non-UK customers is on the roadmap. Cognito for identity, S3 for audio and reports, an API gateway in front of the platform services.

EU AI Act Article 50 (18-test catalogue covering self-identification, opt-out paths, transparency disclosures, training-data provenance), FCA PRIN 2A / Consumer Duty (vulnerable-customer journeys, fair-value communications, foreseeable harm), and Ofcom General Conditions (hold-music duration, recording disclosure, CLI integrity, emergency-call routing). The full catalogue lives at /catalogue.

Yes. Bring-your-own mission tests - for brand voice, accent coverage, named-entity handling, or anything specific to your contact estate - run alongside the curated regulatory catalogue and show up in the same weekly report. Custom tests are authored the same way as the built-ins: describe the journey in plain terms, or import a map.

Reports are dated, signed, and hash-anchored - each report carries a SHA-256 of the underlying evidence (call recordings, transcripts, timing) so tampering is detectable. Admissibility ultimately depends on the regulator and the specific submission, but the audit trail is built to meet evidence-grade standards. Reports include the test catalogue version, the number-by-number pass/fail status, and links to per-call evidence.

Self-serve where they're demo-gated. Per-second where they're capacity-committed. Mapping as a first-class capability rather than an optional bolt-on. Compliance as live, dated, signed evidence rather than “assurance” in a brochure. CI/CD-and-MCP-native rather than “API available, please call your account manager.”