enterprise, consumption-based
EnterpriseDoesn't train on your data
EU hosting available · DPA in the terms
Price: See details
enterprise, consumption-based: Doesn't train on your data. EU hosting available · DPA in the terms.
Vendor: Parloa GmbHPhone and voiceChecked on How we check
Doesn't train on your data
EU hosting available · DPA in the terms
Price: See details
No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.
Doesn't train on your data.
No under the current AI Terms (V3, in force since December 2025): Parloa may use your input and output solely to operate and provide the service. The earlier V2 let it use customer data to improve its AI models.
Vendor's wording: “Output solely to operate, maintain, and provide the”Source: a.storyblok.com8.2 Intellectual Property RightsChecked on
EU hosting available.
Yes: Parloa Zones lets a customer deploy in its own region with customer data staying local (stated on the product page; enterprise).
Vendor's wording: “With Parloa Zones, deploy wherever you operate, with customer data staying local and under your control.”Source: parloa.comRetain your data in your preferred regionChecked on
DPA in the terms.
Yes: the GTC say the parties conclude a Data Processing Agreement that is part of the agreement. The DPA text itself is not published.
Vendor's wording: “Data Processing Agreement ("DPA") which is part of”Source: a.storyblok.com9. Data ProtectionChecked on
EU or Swiss vendor.
Not applicable (EU-based vendor, Parloa GmbH, Berlin)
Vendor's wording: “GmbH, Schönhauser Allee 9, 10119 Berlin”Source: a.storyblok.comPreambleChecked on
Not a fixed default: the site says retention policies are set to each customer's requirements. No period is published.
Vendor's wording: “Data retention policies are set based on individual requirements, not a one-size-fits-all default.”Source: parloa.comCustom data retentionChecked on
7 named on the product page: ISO 27001, SOC 2 Type 1 and 2, PCI DSS, HIPAA, DORA, GDPR and the EU AI Act (compliance frameworks; only ISO 27001, SOC 2 and PCI DSS are certifications in the strict sense).
Vendor's wording: “Certification spans ISO 27001, SOC 2 Type 1 and 2, PCI DSS, HIPAA, DORA, GDPR, and the EU AI Act”Source: parloa.comIndustry certificationsChecked on
Partly: per-agent safety controls and topic enforcement can be configured for each AI agent; no organisation-wide switch to turn AI off is described.
Vendor's wording: “Per-agent safety controls address harmful or abusive contents, and off-topic conversations.”Source: parloa.comConfigurable LLM GuardrailsChecked on
The vendor doesn't say: data location, sub-processors, price.
Other phone and voice tools whose business plan doesn't train on your data and includes a DPA.
The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.
Essentials · $95 / mo
Doesn't train on your dataData in the EU by default · DPA in the terms
✓✓✓✓✓
standalone plan · $49 / mo
Doesn't train on your dataEU hosting available · DPA in the terms
✓✓✓✓✓
Enterprise · $30,000 / yr
Doesn't train on your dataEU hosting available · DPA on request
✓✓✓✓✓
See details
Doesn't train on your dataData in the EU by default · DPA in the terms
✓✓✓?✓
Grow · See details
Doesn't train on your dataEU hosting not documented · DPA on request
✓?✓✓✓
We design and build what your team is missing, around the way you already work and the data rules you set.