AI for conversations that can't leave Europe.
TrustNote writes the record. TrustTone answers the phone. One platform, one DPA, every byte on European soil — built for the professions where "trust us" is not an answer.
Uw opname verlaat Europa nooit.
Votre enregistrement ne quitte jamais l'Europe.
Your recording never leaves Europe.
The record, and the voice.
TrustNote
Records the consultation, writes the structured note — SOAP for the clinic, intake for the notary — and files it with a full audit trail. Never free-form: every note is schema-validated, so it holds up.
consent=per-participant audio=deleted
export=PDF·stamped region=eu-west/BE
TrustTone
Answers every inbound call in native Flemish or Belgian French, states that it's an AI, handles the request, and logs the call — in under a second per reply, without the call ever touching a US cloud.
round-trip=0.74s·p95 barge-in=live
telephony=EU region=eu-west/BE
A supermarket stopped missing calls.
12-week pilot, spring 2026 · measured against the store's own call logs.
The data path, byte by byte.
No US parent company in the path. No CLOUD Act exposure. European models, European datacenters, and a subprocessor register you can read without asking.
or browser
audit hook on every request
Hetzner DE / FI
no training on your data
self-hosted EU model: Q4
Evidence, not enthusiasm.
Elke handeling gelogd. Elk logboek exporteerbaar.
Chaque action journalisée. Chaque journal exportable.
Every action logged. Every log exportable.
Recorded with consent. Processed in Belgium. Deleted on schedule.
Notes that hold up.
An AI that listens to your consultation and writes the structured note — in your profession's own format, with consent captured, audio deleted, and an audit trail your DPO can export. €30 per user, per month.
Five formats. Zero improvisation.
The model never writes free-form notes. Every output is validated against your sector's schema before it reaches you — which makes it consistent, auditable, and safe to file.
You choose what survives the session.
Recordings are deleted the moment the note is validated. Retention is OFF unless your organisation explicitly opts in.
Short by default, set per tenant. When the window closes, deletion is logged — and the log survives.
The validated record and its audit trail belong to you. Leave any time; take everything with you.
Built to AI Act Article 50 ahead of its 2 August 2026 enforcement date — disclosure engineered into the product, not printed in the manual.
Answers in Flemish. Stays in Belgium.
An AI receptionist for your inbound line: native nl-BE and fr-BE, honest about being an AI, sub-second replies — and the call never leaves European infrastructure.
Listen with your eyes.
A real call pattern from the Delhaize Ronse pilot, replayed as an instrumented transcript — every agent reply stamped with its measured round-trip.
Under a second, or it doesn't ship.
Every stage of the voice loop has an explicit budget. If a stage exceeds it, the feature ships off — not on. That's the engineering culture behind the number.
Works with your existing numbers and telephony — including deployments through our telecom channel partners.
Everything your DPO will ask. Already answered.
This page exists so the person paid to say no can say yes without emailing us. Documents are versioned, dated, and current; if a date below looks stale, hold us to it.
| Resource | What it answers | Version · date |
|---|---|---|
| Subprocessor register | Who touches the data, where, under what terms — with a change log. | updated 02.07.2026 |
| Data residency | The full data path with named datacenters and regions. | v1 · 06.2026 |
| DPA template | Processing terms, retention schedule, audit rights, portability. | v2 · 06.2026 |
| DPIA v2 | Risk assessment for voice transcription in regulated settings. | v2 · 06.2026 |
| Art. 50 disclosure spec | Exactly how each participant is told an AI is present. | v1 · 06.2026 |
Change subscriptions for the register are available on request during pilot — your DPO hears about a subprocessor change before it happens, not after.
Who touches the data. All of them.
Every processor in the path, its role, its region, and when it was added. EU entities, EU regions — reviewed before every addition, logged after.
| Processor | Service | Region | Basis | Added |
|---|---|---|---|---|
| Hetzner Online GmbH | Compute & GPU (ASR inference) | DE · Falkenstein / FI · Helsinki | EU entity · DPA | 05.2026 |
| OVHcloud | Object storage | FR · Gravelines / Roubaix | EU entity · DPA | 05.2026 |
| Aiven Oy | Managed Postgres & Redis | FI HQ · EU regions only | EU entity · DPA | 05.2026 |
| Mistral AI | Language-model inference | FR · Paris | EU entity · DPA · no-training clause | 05.2026 |
| TTS provider (EU-resident) | Text-to-speech, voice replies | EU region · residency enforced | DPA · migration clause | 06.2026 |
Migration note, stated plainly: text-to-speech currently runs on EU-resident inference from a non-EU-headquartered vendor. A self-hosted EU model replaces it in Q4 2026; the clause is already in the DPA. We list this because you'd find it anyway — and because a register that hides things isn't a register.
The path your data takes. Every hop, named.
From the moment audio enters the system to the moment it's deleted, here is where it physically is — and where it never goes.
no US CDN in path
tenant ID on every request
DE / FI GPU
schema-constrained output
self-hosted EU: Q4 2026
US clouds in the data path
No AWS, Azure, or GCP anywhere audio, transcripts, or notes travel or rest. Not for convenience, not at peak load, not "only for caching."
Training on customer content
Contractually excluded in the DPA and in our agreements with model providers. Your conversations make your notes, not our models.
Audio retention: zero
Recordings are deleted on note validation unless your organisation explicitly opts into a retention window. Deletion is logged.
Tenant isolation from line one
Every row, path, and queue message carries a tenant ID. Cross-tenant queries are technically impossible without a platform-admin token.
US AI isn't banned in Europe. Here's the honest argument instead.
You'll hear vendors claim American AI is "illegal" for European professionals. It isn't — GDPR requires safeguards, not bans. The real argument is narrower, and it's stronger for being true.
No US parent in the path
Vendors with US parent companies remain subject to the US CLOUD Act wherever the servers stand. TrustSuite has no US parent and no US processor in the data path — there is nothing for that law to reach.
Built to the strictest current guidance
DPIA aligned to the Spanish AEPD's voice-transcription guidance; AI Act Article 50 disclosure engineered before its August 2026 enforcement date — not retrofitted after.
Where European buying is going
NIS2, DORA, and the EU Data Act are all pushing regulated buyers toward European processing. When your procurement review asks "where does the audio go?", our answer is one word long.
Native Flemish and Belgian French
Not "Dutch support" — native nl-BE and fr-BE acoustic and prompting quality, built and tested in Belgium. Your callers can hear the difference; so can your staff.
Niet omdat het moet. Omdat het beter is.
Pas parce qu'il le faut. Parce que c'est mieux.
Not because we must. Because it's better.
In plain words: if your work is covered by professional secrecy, patient confidentiality, or a cautious DPO, choosing a vendor with no American exposure at all removes a category of questions from every review you'll ever face. That's what we sell.
Built for professional secrecy.
Client intakes, deed instructions, and dossier notes — structured, filed, and covered by a DPA that respects beroepsgeheim. The recording never leaves Europe, and never trains anything.
From consultation to dossier in minutes.
The recording is deleted on validation. What remains is the note your clerk would have written — done in minutes, not hours.
Who recorded, who consented, what was generated, who exported — timestamped, exportable, admissible in your own file.
Appointment requests and dossier status calls answered in native Flemish or French — with named matters always routed to a human.
The consultation, documented. The patient, protected.
SOAP and SBAR notes written by an AI that deletes the audio, keeps the data in Europe, and captures patient consent per session — because patient trust is the practice.
The patient hears it before the system does.
DPIA v2 aligned to current European voice-transcription guidance — your DPO can read it in the trust portal before the first session.
A price you can approve without a meeting.
Two products, two numbers, no "contact us" games. The DPA is included in both — compliance is the product, not an add-on.
TrustNote
- Five sector schemas — SOAP, SBAR, legal intake, finance review, internal
- PDF, DOCX and JSON export — every export stamped with its audit reference
- Per-session consent flows, AI Act Art. 50 compliant
- Audio retention off by default · full audit log, exportable
- DPA signable before your pilot starts · all processing in the EU
TrustTone
- Native Flemish (nl-BE) and Belgian French (fr-BE) voice agents
- Sub-second replies — p95 round-trip under 1,000 ms, measured
- AI disclosure on every call · barge-in · human handoff with context
- Works with your existing numbers and telephony provider
- Full call log and audit trail · EU telephony and processing only
The questions procurement asks
Where is our data processed, exactly?
Can our DPO review documents before we commit?
What happens to recordings?
What if we leave?
What does a pilot involve?
The store that stopped missing calls.
A Delhaize supermarket in Ronse put TrustTone on its inbound line for twelve weeks. These are the numbers from the store's own call logs — before and after.
12-week pilot, spring 2026 · opening-hours, availability and order-status calls · nl-BE voice · measured against the preceding 12 weeks.
„De telefoon was een taak. Nu is het gewoon geregeld — en de klant merkt het verschil niet, behalve dat er altijd opgenomen wordt."
What actually happened
Most of the store's inbound calls asked three things: are you open, do you have X, where is my order. TrustTone answers those in native Flemish, immediately, every time — including the Saturday rush, when staff physically can't reach the phone. Calls that name a person, a complaint, or anything unusual are handed to staff with a summary attached. The store kept its number, its telecom provider, and its routines.
Every call is disclosed as AI-answered, logged, and auditable. The pilot ran under the same DPA now offered to every customer.
Eight weeks. Real usage. DPA first.
Tell us who you are and which product you're weighing. A human replies within one business day — in your language.
Thank you. A founder — not a funnel — reads every request. You'll hear from us in the language you chose, with the DPA attached so your DPO can start before we even talk.
A Belgian company, on purpose.
TrustSuite is built in Belgium by three founders who believe European professionals shouldn't have to choose between modern AI and their obligations. So we removed the choice.
Matteo
Carries the pilots, the partnerships, and the promise that every claim on this site survives a due-diligence read.
Jack
Owns the platform — the multi-tenant core, the sub-second voice loop, and the rule that latency budgets are contracts.
Xavier
Runs the trust portal like a product: DPIA, DPA, the register, and the audits that turn our defaults into your evidence.
We're hiring: senior voice-infrastructure engineer
Sub-second ASR → LLM → TTS loops on EU infrastructure. The hardest problem in the stack, owned end-to-end. Write to us via the pilot form and say it's about the role.
Telecom & federation channels
We deploy through telecom partners and sector federations across Flanders — if your members or customers need a sovereign voice layer, talk to us.