Home › Security
Security & complianceSecurity, data hosting and compliance
Your conversations and customer files are sensitive data. This page states where they are processed, how access is controlled, and above all where our responsibility ends and yours begins. The matching contractual documents are supplied with your quote.
Team activity · Sales
Today, 9:00 am – 6:00 pm
Your data stays on the continent.
FinixPhone runs on European data centres and an architecture designed for service continuity.
- Data processed within the European Union, with a GDPR-aligned approach.
- Hosting within the European Union. The website's host is named in our legal notice; the platform's host is provided in the security pack.
- Encrypted communications and granular, role-based access management.
- 99.95 % availability, with redundant voice flows. The scope and terms of that commitment are set out in the service contract.
- 24/7 infrastructure monitoring, including voice quality.
Who answers for what.
This is the part most providers leave vague. We would rather write it down.
| FinixPhone | You, the principal | |
|---|---|---|
| Platform availability | Ours | — |
| Encryption of communications | Ours | — |
| Infrastructure security | Ours | — |
| Access and role assignment | Tool provided | You decide who sees what |
| Lawfulness of your contact list | — | Yours |
| Consent and its proof | — | Yours |
| Purposes and retention periods | Tool provided | You define them |
| Informing the people called | — | Yours |
Prior consent, since 11 August 2026.
In France, law n° 2025-594 of 30 June 2025 took effect on 11 August 2026: calling without prior consent is no longer permitted. That changes how an outbound campaign is prepared.
- Consent must be prior to the call, not collected during it.
- It must be demonstrable: knowing you obtained it is not enough — you must be able to prove it, with its date.
- Consent expires: it is not an acquired state but a dated fact, to be revisited over time.
- The platform provides the means to call and to trace; building a compliant list remains your responsibility. For contacts delivered with proof of consent, see B2C database rental.
Finix World, the publisher of FinixPhone, also runs a dedicated activity for collecting and proving consent — see finixworld.com.
What we provide on request.
These are not published because they depend on your configuration and your contract. They are shared as part of a sales discussion or a procurement review.
Frequently asked questions
Where is data hosted?
In the European Union. The platform's calls and data are processed within the EU, with a GDPR-aligned approach. Further infrastructure detail is provided on request as part of a security pack. Further infrastructure detail is provided on request as part of a security pack.
Are communications encrypted?
Yes. Communications are encrypted and access is managed granularly, by role: an agent does not see what a supervisor sees. Exact protocols are set out in the technical pack provided on request.
What availability is committed?
99.95 % availability, with redundant voice flows and 24/7 infrastructure monitoring. The exact scope of that commitment, its exclusions and its terms are set out in the service contract supplied with your quote.
Who is responsible for contact consent?
The principal, represented by its contact centre or subcontractor. FinixPhone provides the calling and campaign platform; it is up to the customer to ensure the people it contacts have given valid consent and to keep proof of it. That responsibility cannot be delegated.
How do we obtain already-consented contacts?
Through a separate offering: B2C database rental, which supplies contacts with documented proof of consent. It is billed per contact, on quotation, after a count.
What changed in France on 11 August 2026?
Under French law n° 2025-594 of 30 June 2025, telephone marketing without prior consent is no longer permitted in France. Companies that place calls must hold a list whose consent can be demonstrated. That obligation falls on you, not on your telephony provider.
Who can access recordings and history?
Access is managed by role and granted by your account administrator. FinixPhone does not exploit the content of your exchanges for any purpose other than delivering the service.
Running a procurement review?
Tell us what your IT department expects and we will send the matching service contract and technical pack.
No commitment · Reply within 24 working hours