Data Processing Addendum (DPA)
Effective: October 23, 2025. Last updated: October 23, 2025.
This DPA supplements the main terms between AIBZPRO LLC (“Processor”) and Customer (“Controller”) regarding services delivered through the Calleeon AI Voice Platform.
AIBZPRO LLC is a registered company in Georgia.
Identification Number: 405697946.
Legal Address: Georgia, Tbilisi, Saburtalo district, Bakhtrioni street, N 22, flat N75.
1. Roles and Scope
The Customer acts as the Data Controller, and AIBZPRO LLC acts as the Data Processor. Processing occurs solely to operate the AI voice agent services, provide support, and ensure regulatory compliance.
2. Subprocessors
The Customer authorizes the Processor to use the following certified subprocessors:
- Telephony: Twilio Inc., Telnyx LLC
- Voice Synthesis & Cloning: ElevenLabs, Vapi Inc.
- Language Model: Google Cloud Vertex AI, OpenRouter
- Hosting & Storage: Google Cloud Platform
3. Data Transfers
International transfers follow EU Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement. Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
4. Security Measures
The Processor follows ISO 27001 and SOC 2 control frameworks, including logical access control, encryption, vulnerability management, and a 72-hour breach notification standard.
5. Data Retention & Deletion
Voice transcripts are retained for up to 90 days, and recordings for 30 days, unless specified otherwise by the Customer. Upon termination, data is securely deleted within 45 days.
6. Customer Responsibilities
The Customer is responsible for obtaining all end-user consents required under applicable law (e.g., for call recording or AI disclosure) and for configuring compliance features appropriately.