Trust Center — Privacy commitment
Hosted in Germany · Transcription by Gladia (France) · Summaries by Google Gemini (United States, OpenRouter as a fallback only) · Audio deleted after processing · Meeting reports deleted after 12 months
Sub-processors
| Sub-processor | Country | Role | Certification | No-training | Last reviewed |
|---|---|---|---|---|---|
| Hetzner Online GmbH | Germany | Hosting, database, storage | ISO 27001 | N/A | May 2026 |
| Gladia SAS | France | Transcription and diarisation (primary) | — | N/A (EU) | September 2026 |
| Faster-Whisper (local) | Hetzner (Germany) | Last-resort transcription (local) | ISO 27001 (Hetzner) | N/A — in-house processing | May 2026 |
| Groq Inc. | United States | Backup transcription (if Gladia fails) | SOC 2 Type II | — | May 2026 |
| Google LLC | United States | OAuth, Calendar API, summaries (Gemini by direct call, transcribed text only) | ISO 27001 | — | May 2026 |
| OpenRouter | United States | Fallback only, if the Google API is unavailable: AI request routing to Gemini (summaries, transcribed text only) | — | — | September 2026 |
| Microsoft Corporation | United States | OAuth, Graph API | ISO 27001 | — | May 2026 |
Technical measures
- Encryption in transit: TLS 1.2 or 1.3 on all endpoints
- Automatic deletion of audio files as soon as processing is complete (after 14 days if processing does not succeed)
- Automatic deletion of transcripts and meeting reports after 12 months
- Strict multi-tenant isolation: data segregated by organisation
- Technical logs: size-based rotation, at most 5 files of 10 MB per service
Certifications and audits
- SOC 2 Type I in progress via Vanta
- Annual penetration test planned for H2 2026
- GDPR Art. 28 — Data Processing Agreement (DPA) available on request
Audio data
Audio files are deleted automatically as soon as the transcript and meeting report have been produced; if they cannot be produced, after 14 days.
Audio data is never passed on to third parties for model training purposes.
Audio files are stored exclusively by Hetzner Online GmbH, in Germany (EU).
For transcription, the audio is sent to Gladia (France) and, as a backup only, to Groq (United States). Only the transcribed text is sent to Google Gemini (United States) for summarisation, by direct call; OpenRouter (United States) is used only as a fallback, if the Google API is unavailable.