Your conversations stay yours.
Drummer records sales calls, interviews and support calls. They stay in the EU, only the right people can open them, and they are deleted when you say so.
We never train a model on your data.
What we commit to
- EU hosting
- Recordings, transcripts and scores are stored and processed in the EU, AI models included.
- Encryption
- Encrypted in transit and at rest; connection secrets such as CRM tokens twice.
- Access
- Single sign-on and roles. Members see their own conversations; managers and owners see the whole workspace.
- Audit trail
- Every admin action and every write to a connected system is logged: who, when.
- Retention
- You set how long each kind of conversation stays. Deletion is permanent.
Consent, call by call
An interview records a candidate and a support call records your customer: people who never chose Drummer. Everyone on the call knows it is recorded.
| Conversation | How people are told |
|---|---|
| Sales calls | The notetaker joins under its own name and announces the recording. The phone app records an in-person meeting only after a tap. |
| Interviews | The invitation says the interview is recorded to coach the interviewer. A candidate who objects is interviewed without the notetaker. |
| Support calls | Callers hear the recording notice your phone line already plays. On a video call, the notetaker announces itself. |
GDPR and the EU AI Act
You are the controller and Drummer the processor, under a DPA we sign before the first recording. Our sub-processor list comes with it, or on request.
Drummer coaches the interviewer, never the candidate, and makes no decision about a person. Everything its AI writes is marked as AI.
Questions security teams ask
Found a security issue? Write to hello@drummerhq.com.
Can we sign a DPA?
Yes. Ask at hello@drummerhq.com and we send ours, or bring your own template and we review it with you. It covers retention, deletion and security measures.
Where do the AI models run?
In the EU, under agreements that exclude training on customer data. Which providers we use is in the sub-processor list that comes with the DPA.
What happens to our data when we leave?
We delete all of it: recordings, transcripts, scores and connections. Before that, an admin can delete any single recording, and retention periods remove conversations automatically.
Discuss security in a demo.
Meet our team and ask about architecture, data handling and privacy.