Data processing agreement (dpa) — Aircall

Cited by

Facts read from this source

• DPA last updated Report an error

  “This Data Processing Agreement was last updated on January 15, 2025.”

• Baa required for phi Report an error

  “The Customer understands and agrees that it must separately enter into and execute a Business Associate Agreement (“BAA”) if (1) Customer qualifies as a Covered Entity or Business Associate and (2) Customer will make Protected Health Information available to Aircall in connection with performing the Agreement”

• Subprocessor list Report an error

  “the list of the Subprocessors currently engaged by Aircall is listed on Aircall’s website”

• Subprocessor change notice Report an error

  “In case Customer does not send any objection to Aircall in writing within ten (10) business days from receiving the information, it will be deemed to have agreed to the new Subprocessors.”

• Scc supervisory authority Report an error

  “the competent supervisory authority in accordance with Clause 13 of the EU Standard Contractual Clauses for Data Transfers to Third Countries is the Commission nationale de l'informatique et des libertés (CNIL)”

• UK transfer mechanism Report an error

  “where Personal Data is received by Aircall.io, Inc. in the U.S. Aircall commits to subject the Processing of Personal Data to the UK Extension to the EU-U.S. DPF and adhere to the DPF Principles with regard to the processing of Personal Data, and (ii) in all other cases, the UK International Data Transfer Addendum will apply.”

• Breach notification hours Report an error

  “Where a European Data Protection Law applies, Aircall will notify Customer no later than 24 hours after such detection. The notification shall be carried out via email sent to Admin User Email Address.”

• Audit right Report an error

  “Customer or its independent third party auditor reasonably acceptable to Aircall (which shall not include any third party auditors who are either a competitor of Aircall or not suitably qualified or independent) may audit practices relevant to Personal Data Processing by Aircall”

• Audit frequency Report an error

  “The Customer shall conduct the audit at maximum once in any twelve month period, unless Applicable Data Protection Laws require more frequent audits.”

• Audit notice days Report an error

  “The Customer shall provide at least thirty days advance notice of any audit unless mandatory Data Protection Law or a competent data protection authority requires shorter notice.”

• Export period days Report an error

  “Aircall will permit the Customer to export the Personal Data Processed under this DPA, at its expense, in accordance with the capabilities of the Service, within the period of thirty (30) days following such termination.”

• Deletion after export Report an error

  “After the expiry of such period, Aircall will delete all Personal Data stored or Processed by Aircall exclusively on behalf of the Customer and their copies, unless an applicable law requires storage of the personal data.”

• DPA amendments Report an error

  “including Aircall's right to update the terms of the Agreement, any of its policies and this DPA from time to time, as decided by Aircall in its sole discretion, subject to notice to Customer at the Admin User Email Address.”

• DPA governing law Report an error

  “this DPA shall be governed by and construed in accordance with the laws of the country or territory stipulated for this purpose in the Agreement”

• SOC 2 audit Report an error

  “Aircall will select an independent, qualified third-party auditor to conduct, at Aircall expense, at least annual audit of the security of the Services and environments, in accordance with SOC 2, Type II standards or its equivalent.”

• Security measures Report an error

  “The information security program will cover topics such as : Policies and Procedures, Access Control, Business Continuity, HR Security, Network Infrastructure Security, Third-Party Security, Vulnerability Management, Vendor and Risk Management as well as Incident Response.”

• AI features processing Report an error

  “Analysing communication content to provide Customer with deeper insight into Customer’s conversations, provided that the Customer has subscribed to AI Features.”

• Integration data sharing Report an error

  “Sharing customer personal data with integration partners in case that the customer installs integration with the particular tool and authorizes the tool to access customer's data processed by Aircall”

• No sale of data Report an error

  “Will not engage in the Sale of Personal Data subject to US Data Protection Laws.”

• Data controller processing Report an error

  “Customer hereby explicitly acknowledges that Aircall may process Personal Data, as a separate Data Controller, for other processing purposes in compliance with Applicable Data Protection Laws”

• Liability cap Report an error

  “Each party’s and all of its Affiliates’ liability, taken together in the aggregate, arising out of or related to this DPA, and all DPAs between Affiliates and Aircall, whether in contract, tort (including negligence) or under any other theory of liability, is subject to the ‘Limitation of Liability’ section of the Agreement”

• Data retention Report an error

  “Personal Data Processed by Aircall exclusively on behalf of the Customer will be retained by default for a period agreed between Aircall and the Customer (based on Customer's pricing plan), unless the Customer gives Aircall an instruction to delete certain Personal Data sooner.”

• Processing locations Report an error

  “Aircall hereby represents that it will Process Personal Data under this DPA exclusively in the country of Aircall’s residence and in the countries designated in the list of Aircall’s Subprocessors maintained under Section 5.1 hereof.”

Scores citing this record

• The Contact Centre Lead Reliability, call security & telecoms compliance
• The Contact Centre Lead European sovereignty
• The Data Protection Officer Reliability, call security & telecoms compliance
• The Data Protection Officer European sovereignty
• The IT Administrator Reliability, call security & telecoms compliance
• The IT Administrator European sovereignty
• The Office Manager Reliability, call security & telecoms compliance
• The Office Manager European sovereignty
• The Inside Sales Lead Reliability, call security & telecoms compliance
• The Inside Sales Lead European sovereignty
• The Skeptic Reliability, call security & telecoms compliance
• The Skeptic European sovereignty