Your data is safe
with us.
GDPR workflows, EU/DACH focus, Trust Center, retention rules, and AI Act readiness for demanding enterprise requirements.

Secure and compliant.
GDPR Compliant
Full EU data protection compliance.
- Data processing agreements
- Right to deletion
- Data portability
- Retention rules
- Lawful basis documentation

EU AI Act Ready
Transparent AI decision-making.
- Risk assessment
- Human oversight
- Documentation
- Bias monitoring

SSL/TLS Encrypted
Bank-level encryption everywhere.
- TLS 1.3 in transit
- AES-256 at rest
- End-to-end encryption
- Regular key rotation

Built in Europe
European company, European values.
- Austrian company (itellico AI GmbH)
- Strong EU/DACH focus
- European privacy standards
- 25+ years in Europe

GDPR-compliant data flows in Europe.
itellicoAI documents data flows in the implementation plan, operates with GDPR-compliant processes, and reviews customer-approved integrations separately.
Data is encrypted at rest using AES-256 and in transit using TLS 1.3. Access is restricted by role-based controls, and all operations are logged for audit purposes.
EU/DACH focus
EU/DACH Focus
Europe and DACH oriented
End-to-end encryption
At rest and in transit
Regular penetration testing
Quarterly by third party
Retention rules
Documented per workflow
How we protect your data.
Encryption at rest
All stored data encrypted with AES-256, the same standard used by governments and banks.
Encryption in transit
All data transmitted over TLS 1.3, ensuring secure communication between every endpoint.
Configurable retention
Retention rules for conversation data, tasks, Quality Studio issues, exports, and deletion workflows are planned per workflow.
Continuous security monitoring
24/7 infrastructure monitoring with real-time alerting for security events and availability.
Role-based access control
Granular permissions ensure team members only access what they need. No more, no less.
Automated threat detection
Real-time monitoring and alerting flags suspicious activity before it becomes a problem.
Responsible AI.
We believe AI should be transparent, fair, and accountable. Our platform is designed with ethical guardrails from the ground up - so you can deploy AI voice agents with confidence.
- No training on customer data
- Explainable AI decisions
- Human oversight always available
- Continuous bias monitoring
Our AI commitment
Customer data is never used to train or fine-tune our models. Every AI decision can be explained and audited. Human oversight is always available, and we continuously monitor for bias across all interactions.
Common Questions
Questions,
answered.
How is my data processed?
We operate with GDPR-compliant processes and a strong EU/DACH focus. If a customer approves external integrations, we review and document that data flow in the implementation plan.
Do you train AI on my data?
No. Customer data is never used for model training. Your conversations, recordings, and business data remain exclusively yours. Our AI models are trained on separate, licensed datasets.
Can I delete my data?
Yes. We fully support your GDPR right to deletion. You can request complete removal of all your data at any time, and we process deletion requests within 30 days as required by law.
How do you handle security incidents?
We have a dedicated incident response team and notify affected customers within 24 hours of any confirmed breach. Our response process includes containment, investigation, remediation, and a full post-incident report.
Do you offer a DPA?
Yes. A standard Data Processing Agreement is available on request. For enterprise customers, we also support custom DPA terms reviewed by your legal team.
How does data retention work?
Retention is planned per workflow: conversation history, recordings, transcripts, tasks, Quality Studio issues, and API logs can have different requirements. We document the rules before go-live and configure deletion, export, and access accordingly.
Need more details?
Request our full security whitepaper or schedule a call with our security team. We are happy to answer any compliance or data protection questions.