Trust Center

We're built for trust from the ground up. SpeakerStacks is fully aligned with GDPR, UK GDPR, and CCPA, and we're transparent about how data flows through our platform.

• All attendee information you collect stays yours.
• You decide what's collected, how it's used, and when it's deleted.
• We never use or sell lead data for our own marketing or business purposes.

• SpeakerStacks processes attendee data only on your instructions.
• We provide tools to help you manage that data (export, delete, and respond to requests).
• A clear Data Processing Addendum (DPA) is built into our Terms of Service.

SpeakerStacks maintains an AI management system aligned with ISO 42001.

We use AI for three specific, bounded functions:

• Semantic search — helps users find relevant help articles
• AI-generated support answers — provides instant answers from our knowledge base
• Voice testimonial transcription — converts attendee voice recordings to text

Only the transcription feature processes end-user data (audio testimonials). This data is processed transiently and not retained by our AI providers.

What we don't do with AI:

• We don't use AI to analyse, profile, or score leads
• We don't use AI to make decisions about your account
• We don't use AI for marketing or outbound communications
• We don't train AI models on your data

Our AI providers:

• OpenAI (embeddings and transcription) — SOC 2 certified, DPA in place
• Anthropic (help centre answers) — SOC 2 certified, DPA in place

Neither provider trains on API data. Both are listed as subprocessors.

Enterprise customers can request our full AI governance documentation, including our AI System Inventory, AI Policy, AI Risk Register, and Third-Party Provider Assessments.

We help you collect leads responsibly — without any extra work.

• Every lead capture form includes a default privacy notice.
• Attendees see who is collecting their data and why.
• Checkbox opt-ins support compliant consent collection.
• Attendees can request deletion or data access via your team or privacy@speakerstacks.com.

We take platform security seriously. Here's what's under the hood:

• Data encrypted in transit and at rest
• Secure, monitored hosting environments
• Role-based access controls and internal audit logs
• Rapid incident response protocol for breach notifications

If data moves outside the UK or EEA, we've got you covered:

• Standard Contractual Clauses (SCCs) in place with subprocessors
• Transparent subprocessors list available

Have a privacy question? Need help with a data request? We're here for that.

Email us at privacy@speakerstacks.com