> 8x8 and the GDPR: call recording requirements, EU data residency options, the processing agreement and a lawful setup for European contact centres. > > Canonical: https://www.flowconsent.com/en/services/customer-support/8x8 Customer support # 8x8 Preferences · [Official website](https://www.8x8.com) 8x8 is a US-based cloud communications platform providing VoIP phone systems, video conferencing, team messaging, and contact centre solutions. For European businesses, GDPR compliance centres on call recording notifications, data residency selection, and the DPA with 8x8. EU data residency is available and recommended for EU-based deployments. Call metadata, recordings, and contact data are the primary personal data categories processed. [Block 8x8 until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=customer_support) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Customer support](https://www.flowconsent.com/en/services/customer-support) - Consent Preferences - Prior consent Not required - Documented cookies 1 - Third-party domains 3 - Servers United States with EU regional data residency options Overview ## What does 8x8 do? ## **What is 8x8?** 8x8 is a US-based cloud communications company providing unified communications as a service (UCaaS) including VoIP business phone systems, video conferencing, team chat, contact centre solutions (CCaaS), and APIs for voice, video, and messaging. It serves businesses ranging from SMBs to large enterprises and is particularly strong in contact centre deployments combining voice, digital channels, and AI-powered analytics. ## **Personal data processed by 8x8** 8x8 processes call metadata (caller ID, duration, timestamps), call recordings if enabled, voicemail recordings, contact directory information, video meeting recordings and transcripts, chat message content, and user account information. In contact centre deployments, customer interaction history, CRM-integrated data, and AI-generated conversation analytics add further personal data categories. ## **Call recording and GDPR** Call recording is one of the most GDPR-sensitive features. Under GDPR and national telecommunications laws, all parties must be informed that a call is being recorded before the recording commences. Simply having a recorded call is processing of personal data requiring a lawful basis. Options include consent (for outbound sales calls), contract performance (for contractual dispute records), and legitimate interest (for quality assurance with appropriate notice). Recordings must be secured, access-restricted, and deleted when no longer needed. ## **EU data residency and transfers** 8x8 offers EU data residency for customers who select it. For standard deployments without EU residency, call metadata and recordings may be stored on US infrastructure requiring SCCs. Sign the 8x8 GDPR Data Processing Addendum and request EU data residency if your organisation processes significant volumes of EU personal data in communications. ## **Practical compliance steps** Sign the 8x8 DPA and select EU data residency. Implement call recording notification announcements before recording commences. Define retention periods for call recordings and configure auto-deletion. Restrict access to recordings to authorised personnel only. Include 8x8 in your privacy policy describing communications data processing. For contact centre deployments, document the processing in your RoPA. Compliance ## 8x8 and the GDPR - Legal basis Contract performance (Art. 6(1)(b)) for business communications and contact centre services. Legitimate interest (Art. 6(1)(f)) for security logging and fraud prevention. Consent required for optional call recording features where callers have not been otherwise notified. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive for call recording notification requirements, SCCs for US data transfers ### Impact assessment (DPIA) A DPIA should be considered for large-scale contact centre deployments processing call recordings, particularly where recordings may capture sensitive personal information. Call recording in contact centres constitutes systematic monitoring of individuals. ### Sample text for your banner > This call may be recorded for quality and training purposes. Recordings are stored in accordance with our privacy policy. You may object to recording at any time during this call. Cookies and trackers ## What 8x8 sets and contacts - Tracking method Cloud communications platform, VoIP, video conferencing, contact centre, call recording, metadata processing - Server location United States with EU regional data residency options - Cookieless mode available Yes - Data transferred outside the EU 8x8 is a US-based cloud communications platform. EU data residency is available for customers who request it. For standard deployments, call metadata and recordings may be processed on US infrastructure requiring SCCs. 8x8 publishes a GDPR Data Processing Addendum. ### Cookies set (1) | Name | Type | Duration | Purpose | | ------------ | ------- | -------- | ------------------------------------------------------------------------------------------------------------ | | 8x8\_session | session | Session | 8x8 sets functional session cookies for web-based communications interface, call metadata stored server-side | ### Third-party domains contacted (3) - `8x8.com` - `8x8.vc` - `api.8x8.com` Questions ## Frequently asked questions about 8x8 Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Is 8x8 GDPR compliant? 8x8 provides a GDPR Data Processing Addendum and supports EU data residency for customers who request it. Compliance depends on configuring EU data residency, signing the DPA, and implementing proper call recording notifications. ### What legal basis applies to call recording in 8x8? Consent (from callers) for outbound sales calls. Legitimate interest with clear notice for inbound contact centre quality assurance. Contract performance for calls where recording is contractually agreed. Always notify callers at the start of a recorded call. ### How do I enable EU data residency in 8x8? Contact 8x8 sales or support to request EU data residency for your account. This ensures call metadata and recordings are stored on EU infrastructure. EU residency availability may vary by product tier. ### Does 8x8 require SCCs for EU data? For accounts without EU data residency, yes. SCCs are required. With EU data residency configured, data stays within the EU and SCCs are not needed for the primary data flows. Sign the 8x8 DPA regardless of residency choice. ### How long can I retain 8x8 call recordings? Define retention based on your purpose: quality assurance recordings typically 30-90 days, contractual dispute records potentially longer. Configure automatic deletion in 8x8 settings. Longer retention requires documented justification in your RoPA. ### Do I need a DPIA for 8x8? A DPIA is recommended for large-scale contact centre deployments with call recording, particularly where calls may capture sensitive personal information or special category data. Standard business phone system use without recording typically does not require a DPIA. ### How do I handle data subject requests for 8x8 call data? For access requests: use 8x8 admin portal to search and export call records. For erasure requests: delete specific recordings via admin portal. For transcripts and AI analytics: use the 8x8 data management tools to locate and delete data. Document all requests and actions taken. ### Does 8x8 AI transcription require special GDPR consideration? Yes. AI-generated transcripts of calls create additional personal data. Transcripts may capture sensitive information spoken on calls. Apply the same consent and retention rules as recordings. Do not use transcripts for purposes beyond the original recording purpose without a new lawful basis. Same category ## More services: Customer support [See the whole category](https://www.flowconsent.com/en/services/customer-support) ### [vChat](https://www.flowconsent.com/en/services/customer-support/vchat) [vChat is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. vChat supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, vChat ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/vchat) [Preferences](https://www.flowconsent.com/en/services/customer-support/vchat) · ### [TerMed](https://www.flowconsent.com/en/services/customer-support/termed) [TerMed is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. TerMed integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, TerMed helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/termed) [Marketing](https://www.flowconsent.com/en/services/customer-support/termed) · ### [Userflow](https://www.flowconsent.com/en/services/customer-support/userflow) [Userflow is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Userflow supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Userflow ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/userflow) [Analytics](https://www.flowconsent.com/en/services/customer-support/userflow) · ### [RoboReception](https://www.flowconsent.com/en/services/customer-support/roboreception) [RoboReception is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. RoboReception integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, RoboReception helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/roboreception) [Preferences](https://www.flowconsent.com/en/services/customer-support/roboreception) · ### [SiteGPT](https://www.flowconsent.com/en/services/customer-support/sitegpt) [SiteGPT is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. SiteGPT integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, SiteGPT makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/customer-support/sitegpt) [Preferences](https://www.flowconsent.com/en/services/customer-support/sitegpt) · ### [Chatango](https://www.flowconsent.com/en/services/customer-support/chatango) [Chatango is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Chatango integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Chatango helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/chatango) [Preferences](https://www.flowconsent.com/en/services/customer-support/chatango) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)