# Trust and EU readiness

How Betterstood is designed for AI Act and GDPR compliance for European voice elicitation.

[Canonical HTML page](https://staging.elicitra.eigen.rest/trust)

## Designed for AI Act and GDPR compliance.

**Trust**

Betterstood is built for European voice elicitation and lead qualification. We do not claim formal certification. We publish what the platform actually implements.

## AI disclosure by design

Respondents are told they are interacting with an AI assistant. Calls may be recorded and transcribed for structured summaries. The displayed notice is saved in the receipt; the spoken statement is logged separately with the conversation.

## Granular respondent choices

Acceptance of the terms and acknowledgement of the AI notice are required; consent for optional purposes remains separate. Marketing consent is optional, never pre-checked, and stored as a distinct purpose. On Growth and Scale, campaigns can add a controller privacy informative and optional scopes—or bring your own privacy policy texts on Scale—without replacing the platform layer.

## Retention and minimization

Raw transcripts and provider events follow a 90-day raw retention window. Business outputs follow a longer business window, then anonymization. Consent receipts are retained longer as evidence. Provider recordings are purged when raw retention runs.

## EU hosting baseline

Application and database run on Hetzner infrastructure for Betterstood. Some subprocessors may still process data outside the EU until residency work in our deferred readiness track completes — see the subprocessor list.

## Deployer responsibility

Platform customers configure scenarios and campaigns. They remain the deployer for intended purpose, what their agent asks, and any campaign-specific privacy texts they paste. Betterstood provides the runtime, platform consent layer, disclosure, and security controls.

## No advertising or analytics trackers

Betterstood pages do not load profiling cookies or third-party advertising or analytics tags. Technical, preference, security, authentication, and first-party aggregate measurement cookies are documented in the cookie notice. New PUBLIC_WEB phone-call, browser-call, and text-chat starts use Cloudflare Turnstile as a disclosed mandatory security provider. External customer pages remain under their own notice and CMP.

## Legal hub

Operational compliance text for pilots. Counsel review remains required for broader rollout.

- [Legal hub](/terms-and-conditions)
- [Cookie notice](/terms-and-conditions#cookies)
- [Subprocessors](/terms-and-conditions#subprocessors)