Rechtliches

Trust & security

How Dottie protects voice calls, data, and transparency for UK, EU, and global customers.

Zuletzt aktualisiert am 2026-08-04

What we build

Dottie is a voice-only AI agent platform for phone and browser voice. We do not offer chat AI agents as a product.

Callers are informed they are speaking with an AI assistant at the start of the interaction (EU AI Act Article 50 transparency).

Security controls

Organisation-scoped access with Clerk authentication.

Private storage for call recordings; authenticated playback.

Rate limiting, webhook signature verification, SSRF protections on outbound connectors, and production fail-closed guards where critical.

Report security issues via our security.txt contact.

Privacy & data rights

Privacy Policy, Cookie Policy, DPA, and Subprocessors are published on this site.

Customers can export organisation data, look up caller records for DSAR assist, set retention, and erase conversation data from the dashboard Privacy section.

Default conversation retention is 12 months (configurable). Recordings are deleted when conversations are purged.

EU AI Act alignment

Interactive voice agents: AI identity disclosure by design (Article 50(1)), including spoken greetings and browser UI badges.

AI literacy materials for operators: /ai-literacy, plus an in-app go-live checklist on Dashboard → Voice.

Acceptable Use Policy bans prohibited AI practices and unapproved high-risk uses: /aup.

Intended product uses are limited-risk business voice assistance (not Annex III high-risk by default). Formal system inventory is maintained internally.

Synthetic audio: spoken disclosure and structured session/recording provenance metadata ship today. In-band bitstream watermarks depend on model-provider capabilities and phone path feasibility; we do not claim full Article 50(2) in-band marking until that ships.

Call quality scores measure agent operational quality only — not caller emotion recognition.

International transfers & residency

Some subprocessors process data outside the UK/EEA (including AI inference). We use SCCs / UK IDTA where required.

Full “EU-only” voice processing is not available while model inference runs with current providers. Database region can be aligned to EU for new deployments — contact us for enterprise residency discussions.

Contact

Privacy: privacy@dottie.cloud. Legal: legal@dottie.cloud.

Digital by Default AI Ltd, Digital by Default AI Ltd, United Kingdom.

Company registration details will be updated when the official UK entity is finalised.

Dottie — Voice-KI-Agenten-Builder für Dienstleister