Petrova Team,

Could you please clarify your underlying infrastructure and whether it aligns with GDPR principles?

For those of us handling sensitive info, it’d be helpful to know:
- Are audio/transcripts encrypted in transit and at rest?
- Is there an access control policy? Can staff or subprocessors access data?
- Any plans to update the Privacy Policy to reflect GDPR and clarify data handling?
- Do you offer a DPA or internal GDPR-aligned documentation?
- Is there a data retention policy or auto-deletion feature?
- Have any security standards or breach notification processes been implemented?

Thanks in advance for your reply!