Skip to main content

Download Center

All legal, privacy, and compliance documents for Sally AI, in one place.

All documents are reviewed at minimum quarterly and updated whenever our processes, infrastructure, or regulations change.

Legal & Data Protection Documents​

Data Processing Agreement (DPA)

GDPR-compliant DPA under Art. 28, signed with every customer. Covers purpose, deletion, security, and subprocessors. Available in English and German.

Annex 1
Technical & Organizational Measures (TOMs)

Our complete technical and organizational security measures, covering encryption, access controls, monitoring, data masking, employee training, and more.

✓ Updated Q1 2026Download →
Annex 2
Record of Processing Activities (RoPA)

The processor's record of all processing activities carried out on behalf of customers, per Art. 30(2) GDPR.

✓ Updated Q1 2026Download →
Annex 3
Subprocessors List

All subprocessors used by Sally AI with their processing purpose and EU hosting location. Updated when subprocessors change; customers are notified in advance.

✓ Updated Q1 2026Download →
Annex 4
Data Protection Impact Assessment (DPIA)

Structured risk assessment for AI-based meeting transcription per Art. 35 GDPR, identifying and mitigating privacy risks to meeting participants.

✓ Updated 2025Download →
Annex 5
AI Compliance Statement (EU AI Act)

Sally AI's declaration of conformity with the EU AI Act, including our Limited Risk classification and transparency obligations.

✓ Updated 2025Download →
Annex 6
Compliance with Regulation (EU) 2024/1689

Detailed compliance documentation for Regulation (EU) 2024/1689 (EU AI Act), covering our obligations and how they are fulfilled.

✓ Updated 2025Download →
Annex 7
Process Overview for Using Sally

Detailed process descriptions showing how Sally AI integrates with customer workflows, from meeting join to transcript delivery.

✓ Updated 2025Download →
GDPR Compliance Report

Comprehensive report on the GDPR compliance of Aliru GmbH, covering legal basis, TOMs, data flows, and organisational measures.

✓ Updated 2025Download →

Completing the DPA: Two Options​

RecommendedRequest online
1
Fill out the form: Enter your company details directly in the online form.
2
DPA is generated: Your personalized DPA is created automatically.
3
Sign digitally: You receive the DPA via email and can sign it directly online.
Complete manually
1
Download: Get the DPA in your preferred language.
2
Sign: Digitally or by hand. The signatory must be authorized to represent the company.
3
Email: Send the signed copy to privacy@sally.io. We countersign within 1–3 business days.

Contact​

Questions about a document? Our privacy team is happy to help: