Business software

Parloa

Provider: Parloa GmbH · Based in: Parloa GmbH, Schönhauser Allee 9, 10119 Berlin, Germany · Provider website

Plan
1
Sources
9
As of
18 Oct

As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.

Incomplete. 4 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.

At a glance

Hosting
EU option: Enterprise
Training on inputs
no: Enterprise
DPA
yes: Enterprise
Provider
Parloa GmbH
Based in
Parloa GmbH, Schönhauser Allee 9, 10119 Berlin, Germany; Local Court (Amtsgericht) Charlottenburg, HRB 187494 B (q8)

Values from 1 plan, each listed with the plans it applies to. Details and evidence are in the plan table.

Compared plan by plan with other tools in the category Business software:

Details per plan

Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.

Price and scope

Not public: individual consumption-based…
yes

Contract and data use

yes
no
Trust Center 'Data Erasure': automated…

Hosting and sharing

EU option
list available

Evidence

7 sources

not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.

Third-country transfers

According to the Trust Center, data of EU customers stays in EU regions. A third-country link is nevertheless possible according to the sub-processor list: Parloa Group with processing in the US and the EU (support, platform integration), optionally ElevenLabs (US) and Datatrans AG (United Kingdom). The legal basis for transfers (e.g. standard contractual clauses, DPF) is not publicly documented, as the DPA can only be viewed after access is granted.

Certifications (as stated by the provider)

Trust Center: ISO/IEC 27001:2022, ISO/IEC 42001:2023, ISO 17442:2020, SOC 2 Type 1 and Type 2, PCI DSS, HIPAA; DORA, GDPR and the EU AI Act are also named as compliance frameworks (not certificates in the strict sense). C5 Statement V1 2025: ISO 27001 by TÜV Rheinland since 2022, SOC 2 since 2023; Parloa does not consider itself a cloud computing service within the meaning of SGB V/NIS-2 and has no C5 attestation of its own, referring to the C5 attestation of Microsoft Azure. Reports and certificates only after access is granted.

AI Act

Functions: AI agents for customer service by phone and chat (RAG-based answers, routing, authentication, integrations, payments), Agent Builder, testing and analytics functions, LLM guardrails and PII/PCI redaction (security page, fair use policy, AI Terms).

Provider’s statement: Customer AI Terms V3 2025: the intended purpose is a 'neutral customer service agent' based on RAG (section 3.1); use must not result in high-risk use cases under Annex III of the AI Act or in prohibited practices under Art. 5 (section 4.6). Depending on the scope of services, the customer may assume different roles ('provider', 'distributor', 'deployer'), in particular with white-labelling or its own LLM (BYOLLM) (section 5.3); the customer ensures the AI literacy of its staff (section 5.4); the party that determines and controls the use cases is responsible for required notices to end users (section 5.2). An 'EU AI ACT Statement' is listed in the Trust Center but was not publicly viewable.

Classification (for review, not legal advice): For review: customer typically deployer (Art. 3(4) AI Act) of the AI agents, with white-labelling, its own LLM or substantial configuration possibly provider (Customer AI Terms section 5.3 names possible roles as 'provider', 'distributor' or 'deployer'); observe the AI literacy obligation under Art. 4. As end users interact directly with the AI agent, review transparency obligations under Art. 50. High-risk use under Annex III and prohibited practices under Art. 5 are contractually excluded. Not legal advice.

Sources:

Current notes 2026

Since June 2026 the Customer AMP Fair Use & Dynamic Consumption Policy V2.1 applies to new customers (pricing by agent tier and type of use). Customer AI Terms V3 have applied since December 2025. The Trust Center lists ISO/IEC 42001 and transparency information under Art. 28 EU Data Act. Parloa considers C5 not applicable (Trust Center update of 10 June 2025).

Provider structure

The contracting party for EU customers is Parloa GmbH, Berlin (GTC V2 2024); separate terms of Parloa Inc apply to US customers. According to the Trust Center, the Parloa Group (Parloa Inc and Parloa GmbH) provides technical support and platform integration. The platform runs on Microsoft Azure; speech and AI functions are sourced from Microsoft, OpenAI, SAP, Deepgram, ElevenLabs and Google, among others (sub-processor list). No self-service: prices and plans are agreed individually with sales.

Open points of the review

  • No public prices; plan only on request via sales.
  • DPA, technical and organisational measures, DPIA and 'EU AI ACT Statement' only after access is granted in the Trust Center, not publicly reviewed; the transfer basis for the US (SCC/DPF) is therefore not evidenced.
  • Whether the integrated model providers (OpenAI, Microsoft, SAP, ElevenLabs, Deepgram) may use customer data for training is not expressly addressed on the public pages.
  • Retention period of backups and metadata not quantified; metadata licence (AI Terms section 8.3) without time limit.

Frequently asked questions

Where does Parloa store data?

EU hosting selectable (plans: Enterprise (on request)). According to the provider, as of 18 Oct 2026.

Is there a DPA for Parloa?

yes in: Enterprise (on request). According to the provider, as of 18 Oct 2026.

Does Parloa use inputs for AI training?

no in: Enterprise (on request). According to the provider, as of 18 Oct 2026.

Where is the provider based?

Parloa GmbH, Schönhauser Allee 9, 10119 Berlin, Germany; Local Court (Amtsgericht) Charlottenburg, HRB 187494 B. According to the provider, as of 18 Oct 2026.

All sources

  1. 01Pricing designed for the work (Consumption-Based Pricing for AI Agents)Pricing page · retrieved 18 Oct 2026
  2. 02Terms & PoliciesTerms and conditions · retrieved 18 Oct 2026
  3. 03General Terms and Conditions of Parloa GmbH, V2 2024 (effective 1 May 2024)Terms and conditions · retrieved 18 Oct 2026
  4. 04Customer AI Terms for AI-powered Parloa Products, V3 2025Terms and conditions · retrieved 18 Oct 2026
  5. 05Parloa Trust Center (Subprocessors, Data Security, Data Privacy, Certificates)Trust Center · retrieved 18 Oct 2026
  6. 06FAQs: C5 Criteria for Cloud Computing Services under SGB V (C5 Statement V1 2025)Security page · retrieved 18 Oct 2026
  7. 07Enterprise Security & GovernanceSecurity page · retrieved 18 Oct 2026
  8. 08ImprintLegal notice · retrieved 18 Oct 2026
  9. 09AMP – Fair Use and Consumption Policy, V2.1Terms and conditions · retrieved 18 Oct 2026

More tools in Business software with an EU hosting option (in at least one plan)

  • DATEV AI features · Based in: Paumgartnerstraße 6-14, 90429 Nürnberg, Germany
  • HubSpot Breeze AI · Based in: Cambridge, MA, USA
  • Intercom Fin · Based in: Intercom R&D Unlimited Company, 124 St Stephen's Green, Dublin 2, DC02 C628, Ireland
  • Lexware Office · Based in: Munzinger Straße 9, 79111 Freiburg, Germany. Contracting party and processor according to the DPA and privacy notice: Haufe Service Center GmbH

All tools in Business software · Tools with an EU hosting option

Further reading

All tools in the category: Business software. Parloa has at least one plan with an EU hosting option; see also AI tools with an EU hosting option. Figures across all tools: Data report.