RingCentral AI Receptionist and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No: RingCentral states it does not use customer personal data to train its models and does not let its third-party AI providers do so (AI Receptionist privacy datasheet)

Vendor's wording: “RingCentral does not use customer personal data to train its models. RingCentral does not allow third parties to use customer personal data to train their AI models.”

Source: assets.ringcentral.comUse of Artificial IntelligenceSecond source: assets.ringcentral.comChecked on 19 October 2026

Depends on the account location: US accounts store everything in the US; UK accounts in the UK or Germany (service and usage data also in the US); accounts in Europe store customer-generated content, including call recordings, in Germany, with service account and usage data in the US and Germany

Vendor's wording: “RingCentral stores personal data as part of the Services located in the following countries.”

Source: assets.ringcentral.comLocation of Data Storage (table)Checked on 19 October 2026

EU hosting available.

Yes, by account location: an account set up in Europe keeps customer-generated content in Germany; service account and usage data are held in the US and Germany. Some AI providers process in the US (e.g. xAI, Cartesia) and OpenAI in the US or Ireland per customer setting

Vendor's wording: “RingCentral stores personal data as part of the Services located in the following countries.”

Source: assets.ringcentral.comLocation of Data Storage (table)Second source: ringcentral.comChecked on 19 October 2026

DPA in the terms.

Yes: the AI Receptionist datasheet says processing RingCentral does for customers is governed by the RingCentral Data Processing Addendum, incorporated into the Master Service Agreement; the DPA is published (Aug 2026 version)

Vendor's wording: “governed by the RingCentral Data Processing Addendum incorporated into the RingCentral Master Service Agreement.”

Source: assets.ringcentral.comIntro paragraph (processor activities)Second source: assets.ringcentral.comChecked on 19 October 2026

Published.

Yes, public: https://www.ringcentral.com/legal/dpa-subprocessor-list.html (header "updated 01-23-26", change log to 8 Oct 2026). 52 rows (38 main list + 14 partner-programme); 13 rows (10 companies) name AI Receptionist: OpenAI, Google (4 rows), Microsoft, AWS, xAI, Deepgram, ElevenLabs, FireworksAI, Cartesia, ClickHouse

Vendor's wording: “RingCentral may use RingCentral’s affiliates or one or more of the following entities as subprocessors”

Source: ringcentral.comPage header and product columnsChecked on 19 October 2026

On the list.

Active (RingCentral Inc.; EU-US DPF, Swiss-US DPF, UK Extension)

Source: dataprivacyframework.govSearch 'RingCentral'Checked on 19 October 2026

After cancellation the account is disabled at the end of the billing cycle and deleted within 30 days. Every AI Receptionist call is recorded and transcribed; how long recordings are kept is not stated. AI vendors get a zero-data-retention setup where available

Vendor's wording: “Once the account is disabled, the account will be deleted within 30 days, unless otherwise agreed with our customer.”

Source: assets.ringcentral.comData Deletion and RetentionSecond source: assets.ringcentral.comChecked on 19 October 2026

Listed for RingEX (AI Receptionist is an add-on to it): ISO 27001, ISO 27017, ISO 27018, ISO 22301, SOC 2, SOC 3 and C5 (BSI) = 7. The page does not say whether AI Receptionist itself is in scope

Vendor's wording: “RingCentral maintains a comprehensive set of compliance certifications and attestations to protect our customers’ data and communications.”

Source: ringcentral.comExisting certifications and documentationChecked on 19 October 2026

Partly: customer system administrators activate AI Receptionist and add or remove the lines it answers; no separate organisation-wide AI policy switch is described

Vendor's wording: “Customer system administrators activate RingCentral AIR and can add or remove lines to which the Service responds.”

Source: assets.ringcentral.comData SubjectsChecked on 19 October 2026