Is Assistable GDPR compliant?

I have some interested clients here in Germany (medical practices) and they are concerned regarding data protection (GDPR).

What can I tell them?

My thoughts:

GHL is GDPR compliant through ceritfication in the data privacy framework (https://www.dataprivacyframework.gov/list) and the Data Processing Agreement (DPA) (https://www.gohighlevel.com/data-processing-agreement)
In the DPA they list OpenAI & Twilio as sub-processors
When I am using assistable, I am also using OpenAI and Twilio – but not 11labs and all other tools like the transcription service provider
Therefore I guess that assistable isn't fully GDPR compliant as long as they is no certification in the data privacy framework (which regulates european data processed on US servers) and no data processing agreement

I hope somebody can prove me wrong and everything is legit 😄

16 comments