Trust Center / GDPR Compliance
GDPR Compliance
Tabbly supports customers who need GDPR-aligned processing for EU/EEA personal data when they request the corresponding contractual terms and product configuration.
Tabbly’s role under GDPR (on request)
For customers who request GDPR coverage, Tabbly typically acts as a processor for personal data the customer uploads or generates through AI voice agents (for example caller contact details in CRM fields, transcripts the customer chooses to retain, or account user data). The customer generally remains the controller for determining purposes and means of processing.
Commitments available when requested
- Execution of a Data Processing Addendum addressing Article 28-style processor obligations where applicable.
- Support for appropriate transfer mechanisms when personal data leaves the EEA, as documented in the DPA or transfer addendum agreed with the customer.
- Assistance with data-subject rights requests that the customer routes to Tabbly with clear instructions.
- Security measures, incident notification cooperation, and subprocessor transparency as set out in the signed DPA.
- Optional alignment with zero data retention and regional residency where those features are separately requested.
What customers remain responsible for
Customers requesting GDPR support must ensure they have a lawful basis for processing, provide required privacy notices to data subjects, configure agents and integrations lawfully, and only instruct Tabbly to process data consistent with GDPR. Our public Terms and Privacy Policy govern unless a signed GDPR/DPA package for that customer states otherwise.
Request GDPR documentation
Contact [email protected] to request Tabbly’s DPA, security overview, or to schedule a compliance review for your EU workloads.
Last updated: October 2026 · Part of the Tabbly Trust Center