Every call your Superhumans take stays in Europe.
Cirel is a British company running European infrastructure. This is where the commitments live: what we process, where it is stored, who touches it, and how to get it deleted. The three documents below are the contract, not the marketing.
What happens to the data your Superhumans handle.
Six commitments, each one lifted straight out of the documents below.
Your data is stored in the EU
Core customer application data - contacts, transcripts, summaries and call metadata - is stored within the EU/EEA, and telephony connectivity is provided within the EU.
DPA, Schedule 1Models run on European infrastructure
The AI model infrastructure behind your Superhumans is primarily open-source models hosted within the EU, not a call out to someone else's cloud.
DPA, Schedule 1Audio never leaves the continent
Call recordings are stored in Switzerland, which benefits from determinations of adequacy under both the EU GDPR and the UK GDPR.
DPA, Schedule 2GDPR-native, not GDPR-retrofitted
The processor terms are written against the UK GDPR, the EU GDPR and the Swiss FADP, with the EU Standard Contractual Clauses and the UK Addendum covering any restricted transfer.
DPA, Schedule 3Delete a customer record yourself
You can access, export or delete personal data through the features of the Services at any time during the term, without opening a ticket and waiting on us.
DPA, clause 8.1Your calls are not training data
Unless separately agreed in writing, content from your workspace is never used to train generalised AI or machine-learning models, by us or by our providers.
Privacy Policy, section 7Privacy Policy
What personal data we collect, the legal basis for each use, how long we keep it, who it is shared with, and the rights you can exercise over it. Includes the full Google Calendar disclosure.
Read it02Terms of Service
The terms on which the Cirel services are supplied: what the subscription covers, what each party is responsible for, your compliance duties when calling and recording, liability, and how the agreement ends.
Read it03Data Processing Addendum
The processor terms: instructions, security measures, subprocessors, incident notice, deletion, audits, and the cross-border transfer mechanisms. Schedule 1 lists what is processed and where it is stored.
Read itThe current subprocessor list, including each provider’s function and location, is available on written request to compliance@cirel.ai. Send security questionnaires and data protection requests to the same address.