Famulor is built for organizations that need real answers on data protection, not just a privacy-policy link. This page summarizes the platform’s sovereignty commitments and technical safeguards. It is a summary, not the DPA itself — see Getting the full picture below for how to request the complete sub-processor list and a signed Data Processing Addendum.
This page is general information, not legal advice. Review your own regulatory obligations with counsel, especially for sensitive-data use cases under GDPR Art. 9.
Data sovereignty commitments
Technical and organizational measures
Live platform availability is published at status.famulor.io.
International data transfers
Some processing steps — for example a specific language, engine, or model an assistant is configured to use — may run outside the EEA. Where that happens, the transfer relies on recognized legal safeguards: the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework. Enterprise customers can request a Transfer Impact Assessment documenting the safeguards in place for their specific configuration.
Retention and deletion
Call, message, and lead data is kept only as long as your workspace’s data retention settings specify, with automatic deletion once a record expires and every deletion recorded in the audit trail.
Getting the full picture
The specific sub-processors behind each part of the platform, their processing locations, and the legal transfer basis for each are documented in Famulor’s Data Processing Addendum (DPA). Email support@famulor.io to request the current DPA and sub-processor list — the list is reviewed on a regular cadence, so always ask for the current version rather than relying on an older copy.
See also Support for security questionnaires and other compliance requests. 
