GDPR compliance
# 👀feature-requests
m
In order to cooperate with companies in the EU, especially when exchanging sensitive data or personal data, it is essential that the GPDR guidelines can be maintained. https://gdpr.eu/ With the confirmation that Botpress complies with these guidelines we can build trust and be more successful in the market. But you guys already know that and I heard that you are planning this for Q4. Maybe you can prioritize this aspect and become GPDR compliant sooner. That would be awesome. Best regards from Switzerland.
a
Hi do you have a source for the planned implementation. I’m still waiting for a reply to an email. Can’t use botpress at all without GDPR..they actually should have this in place for all EU based addresses..there’s a bot called capacity which is compliant by the way
f
@adventurous-glass-22349 , @modern-nest-17055 info is accurate, we are actively working on European localisation, his roadmap is the latest.
other than localization, we do meet all the requirements https://botpress.com/legal/data-processing-agreement.
Hi all, Awesome news with the new US-EU privacy framework arriving last week, transfers of PII are once again permmited. We are currently in the process of self-certifying, which would make our solution 100% GDPR compliant, I will post an update as soon as we have it, new framework still getting acquainted with it. Don't worry, We will still be pursuing localisation at a future date.
a
Great. Localisation is not that big a deal (in some cases) as the gpdr compliance applies no matter where the data is hosted. If botpress accept paying clients with EU addresses then that client data MUST meet gpdr requirements...look forward to the priority implementation
f
Yeah some companies/govs go beyond GDPR in europe and don't accept data transfer and storage in Canada or US even though permitted under the right circumstances. For most the localisation should be a non-issue, especially if not a huge bureaucracy.
i'll update this post
d
bumping this issue. I am in a bot building discord in germany and this is the main talking point. no gdpr is a blocker for most b2b customers here. I imagine eu-wide since the fines can be substantial. No bigger international competitor I know of implemented it yet, it could be a competitive advantage to have it since it is quite a bloker. Can we see somewhere which aspects are on the roadmap when? - hosting in eu datacenter - right to forget (delete client conversations on demand) - would be great to get a privacy declaration that is valid so we don't have to all pay an expensive lawyer to create one (do we have to get consent before usage?) etc
f
I answered in the other thread let me know if you have questions
s
When asking the Botpress chatbot whether it is GDPR Compliant, as well as comply with the Data Protection Act 2018 (relevant to UK), it answers with a yes. I guess that we are good to go.
n
@freezing-printer-49373 So supporting "right to forget (delete client conversations on demand)" as @linaw7407 mentions is what we really want. I have seen other threads on the Botpress Discord where the requesting to delete is not support for all users and is painful. It should be as simplae as .... Can you delete this conversation per GDPR requirements I'm here to help with any questions you have about BP Tractors and farming, but I don't have the ability to delete conversations. If you have concerns about your data privacy or need assistance with GDPR-related requests, I recommend reaching out to our customer support team directly. They'll be able to assist you with any data-related inquiries. If you have any questions about tractors or farming, feel free to ask! 🚜
f
you can also reach out to legal@botpress.com for platform DSR requests.
233 Views