Request a demo FR

Security · GDPR and EU AI Act

Where your data goes, in black and white.

According to the France Num 2025 barometer, more than half of small and mid-size business owners say they are worried about their data being hacked. Your customers ask the same questions. This page says exactly what we do with your data, and with whom.

Twimi is 100% designed and developed in France.

Source: France Num (DGE), France Num Barometer 2025, 11,021 companies.

52%

of small and mid-size business owners worried about their data being hacked · France Num 2025

Our commitments

What we stand by, in writing.

CommitmentsStatus
E1
Named hostsThe hosts and their countries are named below.
Committed
E2
No trainingYour data is never used to train an AI model.
Committed
E3
Contract signedA data processing agreement is signed before first access.
Committed
E4
AI disclosedThe avatar announces that it is an AI, in writing and out loud.
Committed
System protection, already in place
P1
Daily backupautomation foundations.
Committed
P2
Automatic security testson automation templates.
Committed
P3
Feed monitoringand alerts if something fails.
Committed
What we turn down
R
Some projects we don't take onNo avatar intended to deceive about its identity, harass, discriminate or get around a legal obligation. It is written in our terms and conditions.
Written

No certification is claimed. If a host is certified, ISO 27001 for example, we say so for the host, not for Twimi.

What your customers expect

Your customers too want to know.

A chatbot or voicebot touches your customers' trust. Three figures, and what we do about each. Choose a row.

Our answerCommitment 4

The avatar announces that it is an AI, from the first exchange, in writing and out loud.

Source: Ipsos bva for ESCDA, Customer Service Observatory 2025, figure for France.

Where your data is

A scope, named subcontractors.

One row per subcontractor: what it does, where it hosts, whether it keeps the data.

Your data in the centre, protected by a perimeter, with the subcontractors around it Scope · contract signed before any access YOURDATA Hostingof deployments Speechrecognition Modellanguage Summaryvoice Automations
UseProviderCountryRetention
Speech synthesisMistral AI (Voxtral)FranceSet out in the agreement

Since 2 August 2026, Article 50 of the AI Act requires telling people they are talking to an AI.

Read the EU AI regulation (AI Act) →

RGPD et AI Act

Who does what.

RGPD

You remain the data controller. Twimi acts as processor, under a contract signed at launch.

  • Contact for your data : eheurtier@ary.eu
AI Act · Article 50
  • Twimi provides an avatar that does this by default.
  • You, as the operator, keep this notice switched on.
  • Cloned face or voice : only with the person's written consent.

Documents to read before signing, or to pass on

01

Privacy policy

Read
02

Terms and conditions

Read