Home FAQ CrossCX FAQ Cross CX a GDPR solution GDPR

Cross CX a GDPR solution GDPR

Yes, Cross CX fully GDPR.

Data is hosted in France or on-premise your needs. The solution includes features foranonymization, access rights management, and retention period control. It complies with the strictest security standards, which are essential for sensitive customer relationship data.

6 compliance guarantees

🔒 Native anonymization Detection and masking of personal data (IBANs, card numbers, names, etc.) — configurable by channel and by audience.
⏱ Customizable retention periods Retention periods defined by data type. Automatic deletion upon expiration, without manual intervention.
📄 Time-stamped access logs Every access event is logged and auditable—who, what, when, and from which IP address. Export for internal audits or DPO reviews.
🔐 TLS 1.3 encryption & OAuth2 All data streams are encrypted in transit. OAuth2 authentication. Compliant with the IT security requirements of major corporations.
👁 Read-only — no writing Cross CX in passive listening mode. No data is written to your CCaaS, phone system, or CRM.
🤝 Employee Consent & Information Mechanisms compliant with CNIL regulations, industry agreements, and the Labor Code. Documentation provided for your Works Council and HR department.

GDPR FAQs

Cross CX record calls without explicit consent?
No. Cross CX the compliance tools, but the client remains responsible for its monitoring system under the Labor Code.
Where is Cross CX data hosted Cross CX
Cross CX hosting in France or elsewhere in Europe, either as a SaaS solution or On-Premise your needs.
What happens if a request is made to delete a record?
Cross CX the manual or automated deletion of any record. A record of the deletion is retained for auditing purposes.

The modules in question

Contact Us.

Discover CrossCX