Security & Compliance at Repplia
We operate under the European legal framework and apply technical and organizational measures to ensure security, privacy, and transparency in every voice interaction.
Legal Web & Contracting (LSSI)
Compliance with the Spanish Information Society Services and Electronic Commerce Act.
Public Privacy Policy
Accessible and detailed privacy policy that informs about the collection, processing, and protection of personal data in accordance with GDPR and LOPDGDD.
Legal Notice
Published legal notice with full identification of the data controller, terms of use for the website, and the AI virtual assistant service.
GDPR / LOPDGDD (Voice & Transcriptions)
Voice data processing in compliance with European and Spanish data protection regulations.
EU Hosting & Storage
Data is hosted within the European Union. When services outside the EU are used, GDPR compliance is ensured through standard contractual clauses.
DPA Signed with All Subprocessors
Data Processing Agreements (DPA) signed with every subprocessor involved in the processing of personal data.
Automated Data Deletion
Automated data deletion procedures based on established retention periods for each data type.
PII Anonymization & Sanitization
Anonymization and sanitization mechanisms for personally identifiable information (PII) in voice recordings and transcriptions.
Call Recording Disclosure
Initial message on every call: 'I am an AI assistant' with recording notice when applicable, ensuring transparency from the very first moment.
Data Subject Rights
Users can exercise their rights of access, rectification, erasure, objection, portability, and restriction of processing at any time.
Data Retention Periods
| Data Type | Maximum Period |
|---|---|
| Demo recordings and transcriptions | 30 days |
| Technical and security logs | 90 days |
| Emails and contact requests | Management + legal periods |
| Other data for legal obligations | Per regulations |
AI Transparency (AI Act)
Compliance with transparency obligations under the European Artificial Intelligence Regulation.
Clear AI Interaction Disclosure
Every call begins with a clear identification that the caller is interacting with an artificial intelligence assistant, fulfilling the AI Act's transparency requirements.
Human Handoff
When the situation requires it, the AI assistant can transfer the call to a human operator, ensuring users always have access to personal assistance.
Advanced Guardrails
Advanced guardrail configuration to control the AI assistant's behavior: conversation limits, restricted topics, and escalation protocols.