Data Processing Agreement

The customer is the Data Controller. Silux Voice is the Data Processor for caller audio, transcripts, and call metadata. The customer warrants a lawful basis for processing each caller's data.

Listed at /legal/subprocessors. We give 30 days' notice before adding new sub-processors via email to the account admin.

EU/UK Standard Contractual Clauses (2021 revision) apply for all transfers outside the UK/EEA.

We will assist customers in responding within 30 days. Erasure cascades through recordings, transcripts, and call logs.

TLS 1.2+ in transit, AES-256 at rest, fernet-encrypted credentials, optional KMS-encrypted recordings, audit logs retained 6 years for HIPAA customers.

We will notify affected customers within 72 hours of confirming a personal-data breach.