# Trust and EU readiness

How Betterstood is designed for AI Act and GDPR compliance for European voice elicitation.

[Canonical HTML page](https://elicitra.eigen.rest/trust)

## Designed for AI Act and GDPR compliance.

**Trust**

Betterstood is built for European voice elicitation and lead qualification. We do not claim formal certification. We publish what the platform actually implements.

## AI disclosure by design

Respondents are told they are interacting with an AI assistant. Calls may be recorded and transcribed for structured summaries. The displayed notice is saved in the receipt; the spoken statement is logged separately with the conversation.

## Granular respondent choices

Acceptance of the terms and acknowledgement of the AI notice are required; consent for optional purposes remains separate. Marketing consent is optional, never pre-checked, and stored as a distinct purpose. On PAYG, Growth, and Scale, campaigns can add a controller privacy informative and optional scopes—or bring your own privacy policy texts on Scale—without replacing the platform layer.

## Retention and minimization

Raw transcripts and provider events follow a 90-day raw retention window. Business outputs follow a longer business window, then anonymization. Consent receipts are retained longer as evidence. Provider recordings are purged when raw retention runs.

## EU hosting baseline

Application and database run on Hetzner infrastructure for Betterstood. Some subprocessors may still process data outside the EU until residency work in our deferred readiness track completes — see the subprocessor list.

## Deployer responsibility

Platform customers configure scenarios and campaigns. They remain the deployer for intended purpose, what their agent asks, and any campaign-specific privacy texts they paste. Betterstood provides the runtime, platform consent layer, disclosure, and security controls.

## Self-hosted analytics without cookies

Public marketing pages and the enabled phone demo use self-hosted Umami for pageviews and fixed events. Demo browser observations are distinct from confirmed call, analysis, CRM and email acceptance outcomes. No contact details, transcript or extracted answers are sent. Measurement uses no analytics cookies and respects Do Not Track and Umami opt-out. The app, other respondent flows and embedded campaigns are excluded. The cookie notice describes processing and browser storage. Cloudflare Turnstile remains the disclosed security provider for new PUBLIC_WEB interaction starts.

## Legal hub

Operational compliance text for pilots. Counsel review remains required for broader rollout.

- [Legal hub](/terms-and-conditions)
- [Cookie notice](/terms-and-conditions#cookies)
- [Subprocessors](/terms-and-conditions#subprocessors)