🔒 Security & GDPR

Your data, protected and properly governed.

Sayelo was designed in France, with GDPR and AI Act compliance. Numbers and telephony are provided by a partner operator registered with ARCEP (the French telecoms regulator). Your conversations are never sold on.

✓ Opt-in recordings✓ GDPR compliant✓ Partner operator registered with ARCEP (French telecoms regulator)✓ HDS-certified host

Regulatory framework

Three texts, three commitments.

Having an artificial intelligence talk to your customers falls under the GDPR, the recommendations of the CNIL (the French data protection authority) on call recordings, and the EU AI Act.

GDPR compliant Data processing compliant with the European regulation: purpose, retention period and individuals' rights.
Aligned with the recommendations of the CNIL (the French data protection authority) Recordings subject to the right to object, announced at the start of the call, and kept for a limited period.
AI Act compliant (EU) Every call begins with a clear announcement that an artificial intelligence is speaking, in accordance with Article 50 of the EU AI Act.

Our guarantees

Trust is not optional.

🏥

HDS-certified host

Your call data (recordings, transcripts, summaries, contacts and appointments) is hosted in France by an HDS-certified host (health data hosting provider). Transcription, conversation and speech synthesis are processed in the European Union, by providers bound to Sayelo by a GDPR-compliant data processing agreement and listed in our privacy policy (in French).

🎚️

Opt-in recordings

Never on by default: you switch them on knowingly, and they are announced to the caller. Recordings and transcripts are kept for a limited period, set by the customer (90 days by default), then deleted automatically.

📜

GDPR compliance

Data processing compliant with the GDPR: purpose, retention period, individuals' rights.

🔐

Encryption

Communications and data are encrypted in transit.

🚫

No resale, no training

Your data is used solely to run your agent. It is never used to train AI models, never sold, and never used for advertising.

📡

Partner operator registered with ARCEP

Numbers and telephony are provided by a partner operator registered with ARCEP (the French telecoms regulator). If you keep your number by forwarding it, your calls arrive on this registered line.

🔁

Service continuity

Dual voice engine: if the main engine has an incident, a back-up engine takes over automatically. And after a brief network drop, the conversation resumes seamlessly.

🛡️

Access control

Restricted, logged access to data, on the principle of least privilege.

⚖️

AI announcement on every call

Every call begins with a clear announcement that an artificial intelligence is speaking, in accordance with Article 50 of the EU AI Act. This announcement is mandatory and cannot be switched off.

🎙️

Recordings under control

If the call is recorded, the announcement says so and reminds the caller of the right to object. Recordings and transcripts are kept for a limited period, set by the customer (90 days by default), then deleted automatically.

In plain terms

What it means for you.

You stay in control. You set the confidentiality instructions applied to every call and the retention period for recordings and transcripts, and you can exercise your GDPR rights (access, rectification, erasure) at any time.

Frequently asked questions

Security & privacy.

Where is my data hosted?

Your call data (recordings, transcripts, summaries, contacts and appointments) is hosted in France by an HDS-certified host (health data hosting provider). Details of our processors are in our privacy policy (article 7, in French).

Who can access my data?

Your data is only used to run your agent: restricted, logged access, on the principle of least privilege, and never any resale.

Are my conversations sold on?

Never. Your data is only used to run your agent, and is neither sold nor used for third-party purposes.

Are my conversations used to train an AI?

No. Your data is used solely to run your agent. It is never used to train AI models.

How long are recordings kept?

Recordings and transcripts are kept for a limited period, set by the customer (90 days by default), then deleted automatically.

How do I exercise my GDPR rights?

Contact us: we handle requests for access, rectification and erasure in accordance with the GDPR.

A voice AI
you can trust.

Data hosted in France by an HDS-certified host, GDPR, a partner operator registered with ARCEP (the French telecoms regulator). Set up Sayelo with peace of mind.

Try free for 14 days →