EU Data Sovereignty

What your team says in training
stays here. Data stored in Germany.

Every training session shows how your team sells, where it gets stuck, and which customers it mentions. sip.coach stores this data in Germany. No AI models are trained on your content. Individual speech steps run through data processors under a DPA.

Data stored in Germany · Access and erasure in the app · Works-council-friendly · DPA and EU Standard Contractual Clauses

Germany · EU Stored in Germany DE GDPR Art. 15 / 17 EU AI Act aligned Works Council compatible

Note: This page explains how sip.coach handles data. It is not a legal document; the binding documents are the Privacy Policy and the Legal Notice. For conversations with your works council and data protection officer, there is the data privacy factsheet (PDF).

Why it matters

A training call reveals more than any CRM row.

Three reasons the storage location isn't a side issue.

Content you never want exported.

Objections, pricing arguments, customer and competitor names: a call recording is a map of your sales strategy. With a US vendor, that is an avoidable risk.

Every rep is a named individual.

Every training session belongs to a person. How well someone sells is personal performance data. That makes data protection and co-determination an obligation, not an extra.

US vendors don't solve the problem. They create it.

As soon as a US vendor or US subsidiary has access, the CLOUD Act applies. For insurers, banks, and healthcare providers, that usually rules them out.

Six commitments

Six commitments that hold up under audit.

Each one is an architecture decision, not a statement of intent.

German data storage

Calls, uploaded documents, and team metrics live in a German data center. Individual steps, such as speech processing, run through data processors under a Data Processing Agreement and EU Standard Contractual Clauses.

Storage location: German data center

Access and erasure in the app

Articles 15 and 17 are implemented: one-click export, deletion of account and transcripts. Billing data is anonymized in the process.

Access · Export · Erasure

No training on your data

Transcripts and documents never feed the training of AI models. They serve only the call and its evaluation. After that, they stay yours.

No model training

No individual monitoring

Managers see team metrics and trends, never individual transcripts. Individual calls stay private unless the user shares them. Built for co-determination.

Aggregated · No individual monitoring

German contracting party

sip.coach is operated by a German company under German law. Third-country exposure exists for payment processing via Stripe and for the speech steps, in each case under a Data Processing Agreement and EU Standard Contractual Clauses.

German company · German law

A score you can check

Every evaluation runs three times, the median counts, and the spread is shown. The way the overall score is combined is fixed. Auditors, compliance, and the works council can follow it. Aligned with the EU AI Act.

Auditable · EU AI Act aligned
Data processors at a glance. Section 10 of the privacy policy is the complete and binding version.
Purpose Provider Country Retention
Hosting own infrastructure Germany –
Payment processing Stripe Ireland, plus group entities outside the EU where applicable –
Accounting Odoo – up to ten years (German tax and commercial law)
Web analytics Matomo (own infrastructure, not an external processor) Germany –
Speech-to-text, text-to-speech voice AI data processors – audio discarded immediately after conversion

Last updated: 02 Oct 2026.

Where your data goes

From spoken word to score.

Four steps, and where the data ends up.

01

You speak

Your voice is converted to text. The recording is discarded afterward.

Voice AI (data processor)
02

AI responds

The AI buyer replies with objections, as text and as voice.

Voice AI (data processor)
03

Score calculated

Five dimensions are scored and combined into the overall score by fixed rules.

Evaluation
04

Stored & erasable

Transcript and score live in Germany. Exportable (Art. 15), erasable (Art. 17).

Germany

The speech steps run through data processors under a Data Processing Agreement and EU Standard Contractual Clauses. The recording itself is only converted to text and then deleted; what is stored is the text. Section 9 of the privacy policy has the details.

How we compare

sip.coach compared with US vendors.

Same technology, different legal framework.

Data protection architecture comparison. "US vendor" stands for typical training platforms headquartered in the US.
Criterion sip.coach Typical US vendor
Data storage In Germany Usually US data centers or "EU region" with US parent company
Third-country exposure Payment processing (Stripe) and speech steps, under a DPA and EU Standard Contractual Clauses Usually processed end to end in the US
Training on customer data no Often reserved in terms of service
GDPR Art. 15 & 17 implemented in the app On request, sometimes with deadlines
Works council / co-determination Team metrics, no individual monitoring Individual transcripts often visible
Score Three runs, median, spread shown Often a single AI verdict with no spread
Contracting party German company, German law US entity, often US jurisdiction

For how the score is built in detail, see Objective Scoring & Methodologies.

For decision-makers

The questions that come up before sign-off.

Data protection officers, IT security, and works councils ask these first.

"What does a manager see in the dashboard?"

Team metrics: score trends and the team's weakest dimensions. Individual calls stay private unless the user shares them.

"Can we delete all the data?"

Yes. Employees export or delete their account, transcripts, and scores themselves in the app (Art. 15 and 17). Billing data is anonymized in the process.

"Does any of this end up in the US?"

Data stored in Germany. Individual speech steps run through data processors, some with processing in the US, under a Data Processing Agreement and EU Standard Contractual Clauses. For paid orders, payment processing via Stripe is added, also with group entities outside the EU; details are in the privacy policy.

"Is this permissible in insurance or banking?"

sip.coach is built for these industries: data stored in Germany, third-country exposure only in the speech steps, a score you can check, team metrics instead of individual monitoring. For data protection officers and works councils, there is the data privacy factsheet (PDF).

Frequently asked questions

Answered briefly.

In Germany. Individual speech steps, speech-to-text and text-to-speech, run through data processors, some located in or processing in the US. These are secured by a Data Processing Agreement and EU Standard Contractual Clauses.
No. Conversation content, transcripts, and uploaded documents are not used to train AI models. They serve only the call in question and its evaluation.
Yes. sip.coach was built with works council co-determination in mind. Managers see team metrics; individual calls stay private unless the user shares them. The score can be checked. For co-determination, we provide the data privacy factsheet (PDF) on request.
sip.coach is operated by a German company; data stored in Germany. Individual speech steps run through data processors, some located in or processing in the US, under a Data Processing Agreement and EU Standard Contractual Clauses. For paid orders, payment processing via Stripe is added, also with group entities outside the EU; details are in the privacy policy.
Both are built into the app: you export your data and delete your account, transcripts, and scores yourself. Billing data is anonymized in the process. The binding documents are the Privacy Policy and the Legal Notice.

Three training sessions free. No credit card.

Two minutes to your first training session.

For teams of five or more — book a demo  ·  Download the data privacy factsheet (PDF)