Records of Processing (Art. 30)

Last updated: 16 July 2026

Controller / Processor

AI Fortis Ltd. („ЕЙ АЙ Фортис“ ООД), EIK 208238799, acts as PROCESSOR for clients' end-customer call data and as CONTROLLER for account, usage and billing data. Contact: office@aifortis.com.

Categories of data subjects

• Client account users.
• End customers contacted via the platform (call recipients / callers).

Categories of personal data

• Account: name, email, role, language preference, authentication logs.
• Contact: phone number, name, CRM variables provided by the client.
• Call: audio, recordings, transcripts, AI analysis, timestamps, duration, outcome, cost.
• Usage / billing: metered minutes and calls, invoices.

Purposes

Provide, secure and bill the AI voice-agent service; for end-customer call data, on the client's documented instructions.

Recipients / sub-processors

See the Sub-processors page (LiveKit, Google Gemini, ElevenLabs, Deepgram, OpenAI, Microsoft Azure Speech, Twilio/Telnyx and other carriers, Supabase, Vercel, Cloudflare R2, Upstash, Anthropic, Sentry, email).

International transfers

The primary database is EU-hosted. Where a sub-processor processes data outside the EEA, EU Standard Contractual Clauses + a transfer impact assessment apply.

Retention

Call data: for the duration of the client relationship unless otherwise agreed; deleted on account closure or verified erasure request (website demo data: automatically purged after 12 months). Account and billing data: for the life of the account + legal minimums.

Security measures

TLS in transit, AES-256-GCM encryption of secrets, row-level-security tenant isolation, role-based access with optional MFA, audit logging, and data deletion on account closure and verified erasure requests — see the Security page.