Parloa
Provider: Parloa GmbH · Based in: Parloa GmbH, Schönhauser Allee 9, 10119 Berlin, Germany · Provider website
- Plan
- 1
- Sources
- 9
- As of
- 18 Oct
As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.
Incomplete. 4 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.
At a glance
- Hosting
- EU option: Enterprise
- Training on inputs
- no: Enterprise
- DPA
- yes: Enterprise
- Provider
- Parloa GmbH
- Based in
- Parloa GmbH, Schönhauser Allee 9, 10119 Berlin, Germany; Local Court (Amtsgericht) Charlottenburg, HRB 187494 B (q8)
Values from 1 plan, each listed with the plans it applies to. Details and evidence are in the plan table.
Compare Parloa
Compare with another toolCompared plan by plan with other tools in the category Business software:
Details per plan
Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.
| Feature | Enterprise (on request)Compare Parloa Enterprise (on request) with another tool |
|---|---|
| Not public: individual consumption-based… | |
| Details: Price | Not public: individual consumption-based model (voice per minute, chat per interaction), rates according to use-case complexity or agent tier, volume packages with commitments, outcome-based pricing possible; only via sales ('Book a demo'). |
| yes | |
| Details: AI features included | yes (AI agents for phone and chat based on pre-trained language models with RAG, Agent Builder, Performance Lab, Parloa Lens, LLM guardrails, PII/PCI redaction, integrations; choice between AI models possible, Parloa may replace models at any time) |
| yes | |
| Details: DPA | yes (GTC section 9.1: the parties conclude a data processing agreement that forms part of the contract; according to the Trust Center a pre-signed document for countersignature, text only after access is granted in the Trust Center, not publicly reviewed) Provider’s DPA |
| no | |
| Details: Training on inputs | Customer AI Terms V3 2025 section 8.2: Parloa may use input and output 'solely to operate, maintain, and provide the Parloa Products and related services'. Section 8.3: perpetual, royalty-free licence to metadata (including system logs, call IDs, timestamps, SIP headers), also for improving the products and developing new features; by definition, metadata does not include personal data. Section 6.1: products rely on pre-trained models developed independently of the input. An express statement on training by the integrated model providers (e.g. OpenAI, Microsoft) is not publicly documented. |
| Trust Center 'Data Erasure': automated… | |
| Details: Data retention | Trust Center 'Data Erasure': automated data management with configurable retention periods, default 30 days; afterwards data is deleted or anonymised. Manual deletion requests via privacy@parloa.com, processed within 30 days after identity verification. Security page: individual retention policies ('Custom data retention'). Backups in multiple locations (period not quantified). |
| EU option | |
| Details: Hosting | Trust Center 'Geographic Location of Data': 'EU customer data stays within EU regions while US customer data remains in US regions'; Microsoft Azure data centres. Sub-processor list: Microsoft, MongoDB, OpenAI, Cloudflare, Deepgram, Twilio each 'EU for EU based'; Datadog, Auth0, Google, Bird, Userlike in the EU; optionally ElevenLabs in the US and Datatrans AG in the United Kingdom; Parloa Group 'US and EU based processing'. Security page: data residency via 'Parloa Zones'. |
| list available | |
| Details: Sub-processors |
|
| 7 sources | |
| Details: Sources with retrieval date |
|
Compare Parloa Enterprise (on request) with another tool
Price and scope
- Not public: individual consumption-based…
Not public: individual consumption-based model (voice per minute, chat per interaction), rates according to use-case complexity or agent tier, volume packages with commitments, outcome-based pricing possible; only via sales ('Book a demo').
- yes
yes (AI agents for phone and chat based on pre-trained language models with RAG, Agent Builder, Performance Lab, Parloa Lens, LLM guardrails, PII/PCI redaction, integrations; choice between AI models possible, Parloa may replace models at any time)
Contract and data use
- yes
yes (GTC section 9.1: the parties conclude a data processing agreement that forms part of the contract; according to the Trust Center a pre-signed document for countersignature, text only after access is granted in the Trust Center, not publicly reviewed)
Provider’s DPA- no
Customer AI Terms V3 2025 section 8.2: Parloa may use input and output 'solely to operate, maintain, and provide the Parloa Products and related services'. Section 8.3: perpetual, royalty-free licence to metadata (including system logs, call IDs, timestamps, SIP headers), also for improving the products and developing new features; by definition, metadata does not include personal data. Section 6.1: products rely on pre-trained models developed independently of the input. An express statement on training by the integrated model providers (e.g. OpenAI, Microsoft) is not publicly documented.
- Trust Center 'Data Erasure': automated…
- Trust Center 'Data Erasure': automated data management with configurable retention periods, default 30 days; afterwards data is deleted or anonymised. Manual deletion requests via privacy@parloa.com, processed within 30 days after identity verification. Security page: individual retention policies ('Custom data retention'). Backups in multiple locations (period not quantified).
Hosting and sharing
- EU option
Trust Center 'Geographic Location of Data': 'EU customer data stays within EU regions while US customer data remains in US regions'; Microsoft Azure data centres. Sub-processor list: Microsoft, MongoDB, OpenAI, Cloudflare, Deepgram, Twilio each 'EU for EU based'; Datadog, Auth0, Google, Bird, Userlike in the EU; optionally ElevenLabs in the US and Datatrans AG in the United Kingdom; Parloa Group 'US and EU based processing'. Security page: data residency via 'Parloa Zones'.
- list available
- Microsoft (EU for EU customers), MongoDB (EU for EU customers), Datadog (EU), Auth0 (EU), Cloudflare (EU for EU customers), Deepgram Inc. – speech recognition (EU for EU customers), SAP – LLM models (GmbH only, EU)
- Optional: Twilio (EU for EU customers), Google (EU), Bird (EU), Userlike (EU), OpenAI (EU for EU customers), ElevenLabs (US), Datatrans AG (United Kingdom)
- Parloa Group (Parloa Inc and Parloa GmbH): technical support and platform integration, processing in the US and the EU
Evidence
- 7 sources
- Pricing designed for the work (Consumption-Based Pricing for AI Agents)Pricing page, retrieved 18 Oct 2026
- Terms & PoliciesTerms and conditions, retrieved 18 Oct 2026
- General Terms and Conditions of Parloa GmbH, V2 2024 (effective 1 May 2024)Terms and conditions, retrieved 18 Oct 2026
- Customer AI Terms for AI-powered Parloa Products, V3 2025Terms and conditions, retrieved 18 Oct 2026
- Parloa Trust Center (Subprocessors, Data Security, Data Privacy, Certificates)Trust Center, retrieved 18 Oct 2026
- Enterprise Security & GovernanceSecurity page, retrieved 18 Oct 2026
- AMP – Fair Use and Consumption Policy, V2.1Terms and conditions, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
Third-country transfers
According to the Trust Center, data of EU customers stays in EU regions. A third-country link is nevertheless possible according to the sub-processor list: Parloa Group with processing in the US and the EU (support, platform integration), optionally ElevenLabs (US) and Datatrans AG (United Kingdom). The legal basis for transfers (e.g. standard contractual clauses, DPF) is not publicly documented, as the DPA can only be viewed after access is granted.
- Parloa Trust Center (Subprocessors, Data Security, Data Privacy, Certificates) (Trust Center), retrieved 18 Oct 2026
Certifications (as stated by the provider)
Trust Center: ISO/IEC 27001:2022, ISO/IEC 42001:2023, ISO 17442:2020, SOC 2 Type 1 and Type 2, PCI DSS, HIPAA; DORA, GDPR and the EU AI Act are also named as compliance frameworks (not certificates in the strict sense). C5 Statement V1 2025: ISO 27001 by TÜV Rheinland since 2022, SOC 2 since 2023; Parloa does not consider itself a cloud computing service within the meaning of SGB V/NIS-2 and has no C5 attestation of its own, referring to the C5 attestation of Microsoft Azure. Reports and certificates only after access is granted.
- Parloa Trust Center (Subprocessors, Data Security, Data Privacy, Certificates) (Trust Center), retrieved 18 Oct 2026
- FAQs: C5 Criteria for Cloud Computing Services under SGB V (C5 Statement V1 2025) (Security page), retrieved 18 Oct 2026
AI Act
Functions: AI agents for customer service by phone and chat (RAG-based answers, routing, authentication, integrations, payments), Agent Builder, testing and analytics functions, LLM guardrails and PII/PCI redaction (security page, fair use policy, AI Terms).
Provider’s statement: Customer AI Terms V3 2025: the intended purpose is a 'neutral customer service agent' based on RAG (section 3.1); use must not result in high-risk use cases under Annex III of the AI Act or in prohibited practices under Art. 5 (section 4.6). Depending on the scope of services, the customer may assume different roles ('provider', 'distributor', 'deployer'), in particular with white-labelling or its own LLM (BYOLLM) (section 5.3); the customer ensures the AI literacy of its staff (section 5.4); the party that determines and controls the use cases is responsible for required notices to end users (section 5.2). An 'EU AI ACT Statement' is listed in the Trust Center but was not publicly viewable.
Classification (for review, not legal advice): For review: customer typically deployer (Art. 3(4) AI Act) of the AI agents, with white-labelling, its own LLM or substantial configuration possibly provider (Customer AI Terms section 5.3 names possible roles as 'provider', 'distributor' or 'deployer'); observe the AI literacy obligation under Art. 4. As end users interact directly with the AI agent, review transparency obligations under Art. 50. High-risk use under Annex III and prohibited practices under Art. 5 are contractually excluded. Not legal advice.
- Customer AI Terms for AI-powered Parloa Products, V3 2025 (Terms and conditions), retrieved 18 Oct 2026
- Parloa Trust Center (Subprocessors, Data Security, Data Privacy, Certificates) (Trust Center), retrieved 18 Oct 2026
- Enterprise Security & Governance (Security page), retrieved 18 Oct 2026
- AMP – Fair Use and Consumption Policy, V2.1 (Terms and conditions), retrieved 18 Oct 2026
Current notes 2026
Since June 2026 the Customer AMP Fair Use & Dynamic Consumption Policy V2.1 applies to new customers (pricing by agent tier and type of use). Customer AI Terms V3 have applied since December 2025. The Trust Center lists ISO/IEC 42001 and transparency information under Art. 28 EU Data Act. Parloa considers C5 not applicable (Trust Center update of 10 June 2025).
Provider structure
The contracting party for EU customers is Parloa GmbH, Berlin (GTC V2 2024); separate terms of Parloa Inc apply to US customers. According to the Trust Center, the Parloa Group (Parloa Inc and Parloa GmbH) provides technical support and platform integration. The platform runs on Microsoft Azure; speech and AI functions are sourced from Microsoft, OpenAI, SAP, Deepgram, ElevenLabs and Google, among others (sub-processor list). No self-service: prices and plans are agreed individually with sales.
Open points of the review
- No public prices; plan only on request via sales.
- DPA, technical and organisational measures, DPIA and 'EU AI ACT Statement' only after access is granted in the Trust Center, not publicly reviewed; the transfer basis for the US (SCC/DPF) is therefore not evidenced.
- Whether the integrated model providers (OpenAI, Microsoft, SAP, ElevenLabs, Deepgram) may use customer data for training is not expressly addressed on the public pages.
- Retention period of backups and metadata not quantified; metadata licence (AI Terms section 8.3) without time limit.
Frequently asked questions
Where does Parloa store data?
EU hosting selectable (plans: Enterprise (on request)). According to the provider, as of 18 Oct 2026.
Is there a DPA for Parloa?
yes in: Enterprise (on request). According to the provider, as of 18 Oct 2026.
Does Parloa use inputs for AI training?
no in: Enterprise (on request). According to the provider, as of 18 Oct 2026.
Where is the provider based?
Parloa GmbH, Schönhauser Allee 9, 10119 Berlin, Germany; Local Court (Amtsgericht) Charlottenburg, HRB 187494 B. According to the provider, as of 18 Oct 2026.
All sources
- 01Pricing designed for the work (Consumption-Based Pricing for AI Agents)Pricing page · retrieved 18 Oct 2026
- 02Terms & PoliciesTerms and conditions · retrieved 18 Oct 2026
- 03General Terms and Conditions of Parloa GmbH, V2 2024 (effective 1 May 2024)Terms and conditions · retrieved 18 Oct 2026
- 04Customer AI Terms for AI-powered Parloa Products, V3 2025Terms and conditions · retrieved 18 Oct 2026
- 05Parloa Trust Center (Subprocessors, Data Security, Data Privacy, Certificates)Trust Center · retrieved 18 Oct 2026
- 06FAQs: C5 Criteria for Cloud Computing Services under SGB V (C5 Statement V1 2025)Security page · retrieved 18 Oct 2026
- 07Enterprise Security & GovernanceSecurity page · retrieved 18 Oct 2026
- 08ImprintLegal notice · retrieved 18 Oct 2026
- 09AMP – Fair Use and Consumption Policy, V2.1Terms and conditions · retrieved 18 Oct 2026
More tools in Business software with an EU hosting option (in at least one plan)
- DATEV AI features · Based in: Paumgartnerstraße 6-14, 90429 Nürnberg, Germany
- HubSpot Breeze AI · Based in: Cambridge, MA, USA
- Intercom Fin · Based in: Intercom R&D Unlimited Company, 124 St Stephen's Green, Dublin 2, DC02 C628, Ireland
- Lexware Office · Based in: Munzinger Straße 9, 79111 Freiburg, Germany. Contracting party and processor according to the DPA and privacy notice: Haufe Service Center GmbH
All tools in Business software · Tools with an EU hosting option
Further reading
All tools in the category: Business software. Parloa has at least one plan with an EU hosting option; see also AI tools with an EU hosting option. Figures across all tools: Data report.