Legal documents
Written to be read, not to be ignored.
Four documents, with no hidden clause. These are translations: the French version is the one that prevails. If a sentence is not clear, write to us and we will rewrite it.
Updated in August 2026 · 30 days' notice for any change of sub-processor
Sub-processors
Within the Réponds! service, the sub-processors listed below may process data on our behalf. This list is maintained in accordance with art. 9 nLPD and art. 28 and 30 GDPR.
The list
1
The providers and their purpose
| Sub-processor | Country | Purpose | Legal basis / mechanism |
|---|---|---|---|
| ElevenLabs, Inc. | United States 🇺🇸 | Conversational voice AI (voice, transcription, orchestration) for the restaurant bot | Swiss-US DPF / SCCs |
| Anthropic, PBC | United States 🇺🇸 | Language model (LLM): used via ElevenLabs for voice calls, and directly by the dashboard to read a menu card automatically | Swiss-US DPF / SCCs |
| Telnyx LLC | United States 🇺🇸 | Inbound and outbound SIP telephony, reservation confirmation text messages | Swiss-US DPF / SCCs |
| Infomaniak Network SA | Switzerland 🇨🇭 | Hosting of the dashboard and of the database (Geneva / Winterthur data centres) | Adequacy (Swiss law) |
| Google Ireland Ltd. | Ireland 🇮🇪 (and 🇺🇸) | Audience measurement on the public site (Google Analytics 4), only once the visitor has consented. No processing for client accounts or for calls | Adequacy (EU) / Swiss-US DPF for transfers to the United States |
| Stripe Payments Europe, Ltd. (Stripe, Inc. group) | Ireland / United States 🇮🇪🇺🇸 | Card payment processing and management of subscriptions | DPF / SCCs |
| Commercial partner of Réponds! (reseller or introducer) | Switzerland 🇨🇭 | Only if the account was opened by a partner or taken out through one: access to your dashboard, to your reservations and to your orders, in order to support you. You may ask for that partner's identity, and for this access to end, at any time | Partnership agreement, required before any access |
2
Transfer mechanisms
- Sub-processors in the United States (ElevenLabs, Anthropic, Telnyx): transfers are governed by standard contractual clauses (SCCs) approved by the PFPD, the Swiss data protection authority, or by the Swiss-US Data Privacy Framework, supplemented by a Data Processing Agreement (DPA).
- Sub-processor in Switzerland (Infomaniak): hosting on Swiss territory, subject to the nLPD: no transfer outside Switzerland, adequate level of protection.
- Sub-processor subject to consent (Google, audience measurement): no data is sent to it as long as the visitor has not accepted the measurement. Declining has no effect on how the site works.
The detail of the roles and of the retention periods is set out in our General Terms and Conditions: Annex C and in our privacy policy.
This document is drawn up in French. In the event of a translation, the French version prevails. Swiss law applies, place of jurisdiction Lausanne.