- Home
- Trust & Security
- EU Data Sovereignty & GDPR
What your team says in training
stays here. Data stored in Germany.
Every training session shows how your team sells, where it gets stuck, and which customers it mentions. sip.coach stores this data in Germany. No AI models are trained on your content. Individual speech steps run through data processors under a DPA.
Data stored in Germany · Access and erasure in the app · Works-council-friendly · DPA and EU Standard Contractual Clauses
Note: This page explains how sip.coach handles data. It is not a legal document; the binding documents are the Privacy Policy and the Legal Notice. For conversations with your works council and data protection officer, there is the data privacy factsheet (PDF).
A training call reveals more than any CRM row.
Three reasons the storage location isn't a side issue.
Content you never want exported.
Objections, pricing arguments, customer and competitor names: a call recording is a map of your sales strategy. With a US vendor, that is an avoidable risk.
Every rep is a named individual.
Every training session belongs to a person. How well someone sells is personal performance data. That makes data protection and co-determination an obligation, not an extra.
US vendors don't solve the problem. They create it.
As soon as a US vendor or US subsidiary has access, the CLOUD Act applies. For insurers, banks, and healthcare providers, that usually rules them out.
Six commitments that hold up under audit.
Each one is an architecture decision, not a statement of intent.
German data storage
Calls, uploaded documents, and team metrics live in a German data center. Individual steps, such as speech processing, run through data processors under a Data Processing Agreement and EU Standard Contractual Clauses.
Storage location: German data centerAccess and erasure in the app
Articles 15 and 17 are implemented: one-click export, deletion of account and transcripts. Billing data is anonymized in the process.
Access · Export · ErasureNo training on your data
Transcripts and documents never feed the training of AI models. They serve only the call and its evaluation. After that, they stay yours.
No model trainingNo individual monitoring
Managers see team metrics and trends, never individual transcripts. Individual calls stay private unless the user shares them. Built for co-determination.
Aggregated · No individual monitoringGerman contracting party
sip.coach is operated by a German company under German law. Third-country exposure exists for payment processing via Stripe and for the speech steps, in each case under a Data Processing Agreement and EU Standard Contractual Clauses.
German company · German lawA score you can check
Every evaluation runs three times, the median counts, and the spread is shown. The way the overall score is combined is fixed. Auditors, compliance, and the works council can follow it. Aligned with the EU AI Act.
Auditable · EU AI Act aligned| Purpose | Provider | Country | Retention |
|---|---|---|---|
| Hosting | own infrastructure | Germany | – |
| Payment processing | Stripe | Ireland, plus group entities outside the EU where applicable | – |
| Accounting | Odoo | – | up to ten years (German tax and commercial law) |
| Web analytics | Matomo (own infrastructure, not an external processor) | Germany | – |
| Speech-to-text, text-to-speech | voice AI data processors | – | audio discarded immediately after conversion |
Last updated: 02 Oct 2026.
From spoken word to score.
Four steps, and where the data ends up.
You speak
Your voice is converted to text. The recording is discarded afterward.
Voice AI (data processor)AI responds
The AI buyer replies with objections, as text and as voice.
Voice AI (data processor)Score calculated
Five dimensions are scored and combined into the overall score by fixed rules.
EvaluationStored & erasable
Transcript and score live in Germany. Exportable (Art. 15), erasable (Art. 17).
GermanyThe speech steps run through data processors under a Data Processing Agreement and EU Standard Contractual Clauses. The recording itself is only converted to text and then deleted; what is stored is the text. Section 9 of the privacy policy has the details.
sip.coach compared with US vendors.
Same technology, different legal framework.
| Criterion | sip.coach | Typical US vendor |
|---|---|---|
| Data storage | In Germany | Usually US data centers or "EU region" with US parent company |
| Third-country exposure | Payment processing (Stripe) and speech steps, under a DPA and EU Standard Contractual Clauses | Usually processed end to end in the US |
| Training on customer data | no | Often reserved in terms of service |
| GDPR Art. 15 & 17 | implemented in the app | On request, sometimes with deadlines |
| Works council / co-determination | Team metrics, no individual monitoring | Individual transcripts often visible |
| Score | Three runs, median, spread shown | Often a single AI verdict with no spread |
| Contracting party | German company, German law | US entity, often US jurisdiction |
For how the score is built in detail, see Objective Scoring & Methodologies.
The questions that come up before sign-off.
Data protection officers, IT security, and works councils ask these first.
"What does a manager see in the dashboard?"
Team metrics: score trends and the team's weakest dimensions. Individual calls stay private unless the user shares them.
"Can we delete all the data?"
Yes. Employees export or delete their account, transcripts, and scores themselves in the app (Art. 15 and 17). Billing data is anonymized in the process.
"Does any of this end up in the US?"
Data stored in Germany. Individual speech steps run through data processors, some with processing in the US, under a Data Processing Agreement and EU Standard Contractual Clauses. For paid orders, payment processing via Stripe is added, also with group entities outside the EU; details are in the privacy policy.
"Is this permissible in insurance or banking?"
sip.coach is built for these industries: data stored in Germany, third-country exposure only in the speech steps, a score you can check, team metrics instead of individual monitoring. For data protection officers and works councils, there is the data privacy factsheet (PDF).
Answered briefly.
You might also find this useful.
Three training sessions free. No credit card.
Two minutes to your first training session.
For teams of five or more — book a demo · Download the data privacy factsheet (PDF)