Data protection
Where to find the GDPR documentation, the subprocessor list and data locations — and the controls you operate yourself.
The authoritative account of how Kilevel handles personal data is the Trust Center: controller and processor roles, the Data Processing Agreement, every subprocessor with what it does and where it processes data, and the technical and organisational measures. Cite the Trust Center, not this page, in a procurement review.
What you control
Much of GDPR compliance in a voice deployment sits with you, the controller. The platform gives you the controls:
- Telling callers they are talking to an AI — see AI disclosure.
- Recording only with consent where the law requires it — see Recording consent.
- What you collect — structured outputs extract only the fields you define.
- Which services see the data — the providers you connect under integrations are your choice.
- Who can see it — team roles and scoped API keys.
Recordings
Call recordings are stored in Frankfurt, Germany.