Skip to main content

Download Center

All legal, privacy, and compliance documents for Sally AI in one place. Every document is reviewed at minimum quarterly and updated whenever our processes, infrastructure, or regulations change. Use this page for vendor onboarding, audits, or to share signed annexes with internal stakeholders.

Contractual Documents​

The Data Processing Agreement and its annexes form the contractual basis for processing your data.

Data Processing Agreement (DPA)

GDPR-compliant DPA under Art. 28, signed with every customer. Covers purpose, deletion, security, and subprocessors. Available in English and German.

Annex 1
Technical & Organizational Measures (TOMs)

Our complete technical and organizational security measures, covering encryption, access controls, monitoring, data masking, employee training, and more.

✓ Updated Q1 2026Download →
Annex 2
Record of Processing Activities (RoPA)

The processor's record of all processing activities carried out on behalf of customers, per Art. 30(2) GDPR.

✓ Updated Q1 2026Download →
Annex 3
Subprocessors List

All subprocessors used by Sally AI with their processing purpose and EU hosting location. Updated when subprocessors change; customers are notified in advance.

✓ Updated Q1 2026Download →
Annex 4
Data Protection Impact Assessment (DPIA)

Structured risk assessment for AI-based meeting transcription per Art. 35 GDPR, identifying and mitigating privacy risks to meeting participants.

✓ Updated 2025Download →
Annex 5
AI Compliance Statement (EU AI Act)

Sally AI's declaration of conformity with the EU AI Act, including our Limited Risk classification and transparency obligations.

✓ Updated 2025Download →
Annex 6
Compliance with Regulation (EU) 2024/1689

Detailed compliance documentation for Regulation (EU) 2024/1689 (EU AI Act), covering our obligations and how they are fulfilled.

✓ Updated 2025Download →
Annex 7
Process Overview for Using Sally

Detailed process descriptions showing how Sally AI integrates with customer workflows, from meeting join to transcript delivery.

✓ Updated 2025Download →

Certificates, Evidence & Templates​

GDPR Compliance Report

Comprehensive report on the GDPR compliance of Aliru GmbH, covering legal basis, TOMs, data flows, and organisational measures.

✓ Updated 2025Download →
Privacy Notice for Meeting Participants

Information sheet for people who attended a meeting where Sally AI was present: what data is processed, the legal roles, and how to exercise their rights.

✓ Updated 2026Download →
Sample Works Agreement (Template)

Editable Word template for a works agreement (Betriebsvereinbarung, in German) covering purpose, data types, opt-out, retention, and employee rights. Adapt it freely for your works council.

✓ Updated 2026Download (Word) →
ISO Certificate (9001, 14001, 27001)

Independent certificate confirming our integrated management system per ISO 9001:2015, ISO 14001:2015, and ISO 27001:2022. Registration no. 260526 14 IMS.

✓ Updated 2026Download →

Completing the DPA: Two Options​

RecommendedRequest online
1
Fill out the form: Enter your company details directly in the online form.
2
DPA is generated: Your personalized DPA is created automatically.
3
Sign digitally: You receive the DPA via email and can sign it directly online.
Complete manually
1
Download: Get the DPA in your preferred language.
2
Sign: Digitally or by hand. The signatory must be authorized to represent the company.
3
Email: Send the signed copy to privacy@sally.io. We countersign within 1–3 business days.

Contact​

Questions about a document? Our privacy team is happy to help: