Skip to main content

GDPR & Data Protection · Architecture & Art. 28 Register

GDPR Audio Transcription in Europe: OVHcloud France Storage & Zero Data Retention

When transcribing confidential HR hearings, legal dictations, medical consultations, works council sessions, or ethics-approved academic interviews, vague privacy badges are not enough. Here is the exact technical and legal architecture of Le Scribe Audio for Data Protection Officers (DPOs), IT security teams, and research ethics committees.

Key Takeaways

  • Physical file & database storage in France at OVHcloud, protected with AES-256 encryption at rest and TLS 1.2/1.3 in transit.
  • AI inference via Google Cloud Vertex AI (Europe region) under contractual Zero Data Retention — zero data retention and zero AI model training, with full legal transparency regarding the US Cloud Act.
  • Zero intrusive meeting bots and zero calendar OAuth permissions: strict file-upload control up to 10 continuous hours and 10 GB.
  • Instant, irreversible 1-click deletion of audio, segments, summaries, and transcripts from your dashboard as soon as your Word (.docx) file is exported.

1. Why Free Converters and Calendar Bots Fail European DPO Audits

Organizations across Europe face two recurring compliance traps when adopting automated speech-to-text tools. First, unverified “free online Whisper” websites frequently retain uploaded recordings indefinitely or reuse voice data to train commercial models without an Article 28 GDPR Data Processing Agreement. Second, US-hosted meeting-bot assistants demand broad read access to corporate calendars and join Microsoft Teams or Zoom calls as external third-party participants — exposing confidential sessions before anyone has even reviewed the guest list.

Le Scribe Audio was engineered in France around data minimization: no calendar integration, no live bot joining your calls, and immediate user-triggered erasure once your final document is ready.

2. Factual Infrastructure Breakdown: OVHcloud France + Google Cloud Vertex AI (Europe)

We believe DPOs, bar associations, hospital IT teams, and university ethics boards deserve 100% factual precision rather than ambiguous marketing slogans:

  • Primary Storage in France (OVHcloud): Your uploaded audio/video recordings (MP3, WAV, M4A, MP4, Olympus/Philips .DS2/.DSS) and structured transcript segments are hosted in France on OVHcloud infrastructure and encrypted at rest using AES-256.
  • 2-Pass Inference in Europe (Google Cloud Vertex AI — Zero Data Retention): Acoustic transcription and optional 1-click summarization (executive summary followed by a chrono-thematic breakdown) execute via Google Cloud Vertex AI (Europe region). Under enterprise contractual terms, processing occurs in volatile memory with Zero Data Retention — no customer audio or text is cached on disk by the inference endpoint or used to train foundation models.
  • Clear Legal Disclosure on the US Cloud Act: Because Google Cloud is a US-headquartered provider, it remains legally within the scope of the US Cloud Act even when workloads are pinned to European Union regions under EU Standard Contractual Clauses (SCCs). We never claim “US-exempt AI”; instead, we pair European regional processing and Zero Data Retention with French primary storage at OVHcloud and 1-click permanent purge so sensitive recordings do not linger online.

3. Article 28 GDPR Sub-Processor & Corporate Identity Register

Entity / Sub-ProcessorProcessing RoleLocation & Safeguards
EURL LE SCRIBE AUDIOPlatform Publisher & Data Processor37 rue Gisèle Halimi, 35650 Le Rheu, France · RCS Rennes 890 049 927 (VAT FR44890049927)
OVH SAS (OVHcloud)Encrypted File & Database HostingFrance (EU) · AES-256 at rest, ISO/IEC 27001
Google Cloud Vertex AI2-Pass Speech-to-Text & Summary InferenceEurope Region · Contractual Zero Data Retention, EU SCCs (US parent subject to Cloud Act)
Clerk & StripeAuthentication & PCI-DSS BillingEU SCCs / PCI-DSS Level 1 · Zero access to audio or transcript files
PostHog (EU Cloud)Product Reliability & Opt-In AnalyticsFrankfurt, Germany (EU) · Consent Mode v2 denied by default

Corporate Governance & DPO Contact: LE SCRIBE AUDIO (EURL with share capital of €1,000, SIRET 890 049 927 00043). Statutory Managing Director (Gérante): Mme Miora HARILALANJATOVO. Administrative & DPO Inquiries: Jérémie TERRAL — Assistant de direction, LE SCRIBE AUDIO — Email: info@lescribeaudio.com · Phone: +33 9 61 44 46 64.

4. Speaker-Label Coding vs. Human Review Before Exporting to Word (.docx)

Inside our interactive player, you can globally replace speaker diarization labels in 1 click (for instance renaming Ms. Smith (28) to Participant P1 (28) or Witness A) prior to downloading your 100% editable Microsoft Word (.docx) file. Please note that speaker-label coding updates the diarization headers only — it does not automatically redact proper nouns mentioned inside spoken sentences, which should be verified during your human listening pass (2 to 3 hours per hour of audio vs 4 to 7 hours of manual typing from scratch) or entrusted to our confidential dual-transcriber human proofreading team (€60 excl. VAT/hour).

Frequently Asked Questions

Where are uploaded audio files stored and what is your position on the US Cloud Act?

All uploaded audio/video files and PostgreSQL transcript databases are stored physically in France at OVHcloud, encrypted with TLS 1.2/1.3 in transit and AES-256 at rest, with permanent 1-click deletion available at any time. AI inference runs via Google Cloud Vertex AI in the Europe region under strict contractual Zero Data Retention (in-memory processing only, zero file retention, zero AI model training). In full legal transparency for your DPO: because Google Cloud is a US-headquartered corporation, the inference sub-processor remains legally subject to the US Cloud Act despite European regional processing and EU Standard Contractual Clauses.

Are client recordings ever used to train AI speech models?

Never. Neither EURL LE SCRIBE AUDIO nor our European-region inference infrastructure (Google Cloud Vertex AI under Zero Data Retention) retains your recordings for training, fine-tuning, or improving artificial intelligence models.

Does Le Scribe Audio connect to Microsoft 365 / Google Workspace calendars or join calls as a bot?

No. Unlike bot-based meeting assistants (such as Otter, Fireflies, or Read.ai), Le Scribe Audio never requests OAuth access to your corporate calendar and never injects a visible or hidden bot into Teams, Zoom, or Webex sessions. You upload only the specific audio or video files you choose to process.

Can we sign an Article 28 GDPR Data Processing Agreement (DPA)?

Yes. You can download our signed technical DPO & Article 28 GDPR compliance fact sheet directly in PDF format or contact Jérémie TERRAL — Assistant de direction, LE SCRIBE AUDIO at info@lescribeaudio.com (+33 9 61 44 46 64) for institutional DPA onboarding.

Ready to cut your transcription and drafting time in half?

Start immediately with 60 free transcription minutes — no credit card required, no mandatory subscription, and 100% editable Microsoft Word (.docx) export.