Compliance Center
Status as of 13 September 2026. Nothing on this page is a claim of GDPR or EU AI Act compliance. It describes the controls that exist in the product today.
Requires legal review
The platform (application, PostgreSQL database, Redis queue, object storage and the Activepieces automation engine) runs on one server in Frankfurt am Main, Germany. That location comes from the production host's IP registration and geolocation; we are still confirming it against the hosting contract. Some providers below are US-based, so not all processing stays in the EU.
Requires legal review
Twilio, Anthropic, OpenAI, Resend, Stripe and Slack are US-headquartered. Counsel has not yet confirmed which transfer mechanism covers each one, so we do not claim SCCs, Data Privacy Framework reliance or zero data retention.
Requires legal review
The published DPA (version 2026-09-13-draft) is a draft for counsel review. It is not a signed agreement, and the platform will not record a DPA as executed until the template is approved.
Available
Conversations are deleted automatically 12 months after last activity by default. An agency or client can set a period from 1 to 3650 days, never unlimited. Every scheduled cleanup run is logged.
Available
Agencies and their clients can export their data from the portal at any time. After an approved closure the account is disabled, then permanently purged after 30 days. Database backups roll off within 14 days.
Planned
Every client's voice configuration has an AI disclosure turned on by default, localized per language (Spanish: “Hola, estás hablando con un asistente de inteligencia artificial de …”). The configuration puts it first, before the business prompt, with no barge-in allowed while it plays. Only AgentLane can turn it off, with a recorded reason. No live voice runtime exists yet, so nothing plays this to callers today. This is a technical control, not a legal conclusion.
Planned
AgentLane does not run live AI voice calls today. Twilio is used for missed-call detection and SMS. Spanish voice is not production-validated. Validation needs a 14-point Spanish call QA checklist and an explicit sign-off.
Planned
There is no outbound dialer. Outbound is disabled by default for every client. Before it can be enabled, a call must pass consent, do-not-contact, calling-hours, purpose and disclosure checks, and the policy must be legally approved.
Available
Numbers normally live in the Twilio account of the agency or its client, so they stay with that account if you leave. Confirm per client, because a platform Twilio fallback account also exists.
Available
AgentLane does not add a per-minute telephony fee. Telephony usage (calls and SMS) is billed separately by the Twilio account that owns the number. AI model usage is either metered in AI credits on managed-AI plans or billed directly by the provider when an agency or client uses its own API key. Cancellation needs 30 days' written notice by email, and self-serve plans have no minimum term.
Only vendors actually integrated in the platform are listed. Every entry still needs legal verification.
| Vendor | Purpose | Region | Transfer mechanism |
|---|---|---|---|
| VPS hosting provider (IP registered to xTom GmbH) | Hosting and storage of all platform data | Germany (Frankfurt am Main) — inferred from IP geolocation of the production host on 2026-09-13; the hosting contract is not in the repository | Not applicable if the provider and its support access stay in the EEA — both unconfirmed |
| Twilio | Missed-call detection and SMS conversations on behalf of the end client | United States-headquartered provider; no Twilio regional processing option is configured in this repository | Not confirmed — requires legal verification of the executed vendor terms |
| Anthropic | Generating AI replies in automations (AI proxy) and the in-portal support chatbot | United States-headquartered provider; region not configurable in this repository | Not confirmed — requires legal verification of the executed vendor terms |
| OpenAI | Alternate AI provider behind the AI proxy | United States-headquartered provider; region not configurable in this repository | Not confirmed — requires legal verification of the executed vendor terms |
| Cal.com | Creating bookings in the end client calendar | Depends on the Cal.com account the client connects | Not confirmed — requires legal verification of the executed vendor terms |
| Resend | Account emails and automation emails | United States-headquartered provider; region not configured in this repository | Not confirmed — requires legal verification of the executed vendor terms |
| Stripe | Billing agencies for AgentLane fees | United States-headquartered provider | Not confirmed — requires legal verification of the executed vendor terms |
| Slack | Alerting AgentLane staff about platform incidents | United States-headquartered provider | Not confirmed — requires legal verification of the executed vendor terms |
| Google Analytics 4 | Understanding marketing-site traffic. AgentLane acts as controller here, not as a processor for clients. | Google infrastructure; region not configured | Not confirmed — requires legal verification of the executed vendor terms |
| Data | Default period | How it is enforced |
|---|---|---|
| Conversation transcripts and call/SMS metadata | 365 days | PurgeConversationsJob, daily 03:00, measured from last activity. RETENTION_CLEANUP_DRY_RUN=true switches it to counting only. |
| Call audio recordings | — | AgentLane has no voice runtime and stores no audio. Twilio-side recording settings live in the Twilio account that owns the number. |
| In-portal support chatbot conversations | 365 days | RetentionExtendedCleanupJob, daily 03:30, measured from the session last update. |
| Outbound webhook delivery logs (operational logs) | 90 days | RetentionExtendedCleanupJob. |
| Application audit log | 1095 days | RetentionExtendedCleanupJob. Deleting audit evidence is a legal decision; keep dry-run until counsel sets the period. |
| Generated data-export archives | 7 days | PurgeDataExportsJob deletes the archive and its row after expiry. |
| Accounts approved for deletion (grace period before purge) | 30 days | PurgeDeletedAccountsJob, daily 04:00. |
| Raw Stripe webhook records | 730 days | PurgeBillingRecordsJob. |
| Application container logs | — | Size-based rotation (50 MB x 3 files per container), not time-based. |
| PostgreSQL backups | 14 days | agentlane-backup.timer with 14-day rotation. Deleted data persists in backups until they rotate out. No offsite copy, no restore test recorded. |
| Legacy home-services tables (conversations, messages, bookings, quotes, events, opt-outs) | — | No retention job. Deleted only when a bridged client is purged. Documented gap (docs/gdpr-compliance-audit.md E5). |
Security and privacy contact: contact@agentlane.agency
Requires review and approval by qualified EU/Spanish legal counsel before being presented as final contractual/legal documentation.
DPA (draft) · Privacy Policy · Cancellation Policy · Product documentation