Know where your call data goes.

Confirm whether recording and transcription are enabled, where live audio is processed, and which telephony, speech and model providers receive it. These may use different locations.

Confirm where recordings, transcripts, databases, logs and backups are stored. Include disaster recovery copies; one cloud region does not describe the complete data path.

Identify authorised teams, roles and subprocessors, the countries they access data from, and the purpose of any overseas disclosure. Confirm the safeguards that apply to the arrangement.

Agree how long each data type is kept, who can request access or deletion, and how deletion affects backups, logs and legal retention requirements.

Record the responsible organisation, privacy contact, service scope and the date the data facts were confirmed. Recheck them when a provider, location or access arrangement changes.