Data

Synthflow and the GDPR: AI training, data location and DPA

Enterprise: Doesn't train on your data. EU hosting available · DPA on request.

Vendor: Synthflow (AgentFlow AI GmbH)Phone and voiceChecked on How we check

Verdict

Is Synthflow GDPR compliant?

Enterprise

Enterprise

Doesn't train on your data

EU hosting available · DPA on request

Price: $30,000 / yr

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Synthflow train on your data?

Trains on your data by default?

Checked

Doesn't train on your data.

No. Synthflow does not use customer input or output to train its own or third-party models

Source: docs.synthflow.aiClause on Input and Output ('Synthflow does not use Customer Input or Output to train…')Checked on

Location

Where does Synthflow store your data?

EU hosting on this plan

Checked

EU hosting available.

Yes: workspaces can be in the EU region

Source: docs.synthflow.aiRegion addresses ('EU')Checked on

Contract

Does Synthflow sign a data processing agreement?

Processors

Who else handles Synthflow data?

Sub-processors (companies that handle the data for them)

Checked

20 listed.

Public. 20 entries, 18 listed for the US and EU, 2 US only (Hex, Cerebrium); AI: OpenAI, Anthropic, Deepgram, ElevenLabs, Soniox; hosting on AWS, Google Cloud and Azure

Source: security.synthflow.aiSubprocessors tableChecked on

Retention

How long does Synthflow keep your data?

How long data is kept

Checked

Per agent: recordings can be switched off, and 'Limit Data Retention to 30 days' deletes transcripts, recordings and caller IDs after 30 days; PII redaction is available. Without the toggle no limit is stated

Source: docs.synthflow.aiSections 'Save Recordings' and 'Limit Data Retention to 30 days'Checked on

Security

Which certifications and admin controls does Synthflow have?

Security certifications

Checked

SOC 2 Type 2, ISO/IEC 27001, ISO/IEC 42001:2023 and PCI DSS v4.0.1; HIPAA, GDPR and EU AI Act listed

Source: security.synthflow.aiCompliance sectionChecked on

Admin controls for AI

Checked

Per agent: recording, retention and PII redaction are set in each agent's Security & Compliance section; workspace controls are scoped in enterprise contracts

Source: docs.synthflow.aiAgent editor, Security & ComplianceSecond source: synthflow.aiChecked on

The vendor doesn't say: price.

Alternatives

Synthflow alternatives that don't train on your data

Other phone and voice tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Crisp

    Essentials · $95 / mo

    Doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • RingCentral AI Receptionist

    standalone plan · $49 / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • BOTfriends X

    See details

    Doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓?✓

  • Parloa AI Agent Management Platform

    enterprise, consumption-based · See details

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓?✓

  • Placetel AI

    Grow · See details

    Doesn't train on your dataEU hosting not documented · DPA on request

    ✓?✓✓✓

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices