GDPR checklist for customer support tools.
Support tools store conversations, attachments and customer identifiers, often for years. Compare 34 common tools and see what to check for each.
Compared at a glance
| Tool | Usual role | Data location | Agreement |
|---|---|---|---|
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Obtained through the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Obtained through the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Usually the United States | Obtained through the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Obtained through the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Obtained through the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Obtained through the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Obtained through the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Obtained through the vendor | |
| Usually a processor | Often the United States, check your account | Obtained through the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Often the United States, check your account | Published by the vendor | |
| Usually a processor | Often the European Union, check your account | Published by the vendor | |
| Usually a processor | Set per account or project | Obtained through the vendor | |
| Usually a processor | Set per account or project | Published by the vendor | |
| Usually a processor | Usually Germany | Obtained through the vendor | |
| Usually a processor | Often Germany, check your account | Published by the vendor |
What to check for customer support tools
- Set a retention period for closed conversations and attachments.
- Check how you would find and delete one person’s conversations when they ask.
- Review which team members and integrations can read the data.
- Record where the data is stored and any transfers outside the EEA.
All customer support tools
IntercomCustomer support
ZendeskCustomer support
CrispCustomer support
Help ScoutCustomer support
FreshdeskCustomer support
GorgiasCustomer support
KustomerCustomer support
TidioCustomer support
LiveChatCustomer support
OlarkCustomer support
Tawk.toCustomer support
Re:amazeCustomer support
GrooveCustomer support
HiverCustomer support
ServiceNowCustomer support
HelpjuiceCustomer support
AircallCustomer support
DialpadCustomer support
RingCentralCustomer support
8x8Customer support
TalkdeskCustomer support
Five9Customer support
GenesysCustomer support
RingoverCustomer support
CloudTalkCustomer support
JustCallCustomer support
Yellow.aiCustomer support
AdaCustomer support
BotpressCustomer support
ManyChatCustomer support
ChatfuelCustomer support
VoiceflowCustomer support
UserlikeCustomer support
SmartsuppCustomer support
Questions, answered.
What should I check before using a customer support tool under the GDPR?
Set a retention period for closed conversations and attachments. Check how you would find and delete one person’s conversations when they ask. Review which team members and integrations can read the data. Record where the data is stored and any transfers outside the EEA.
Do I need a data processing agreement with a customer support provider?
If the provider handles personal data on your behalf, yes: Article 28 of the GDPR requires a written contract. Some providers publish the text, others give it to you inside your account. Providers that decide their own purposes may act as independent controllers instead, so check the role.
Which customer support tools does Privacyboard cover?
Intercom, Zendesk, Crisp, Help Scout, Freshdesk, Gorgias, Kustomer, Tidio, LiveChat, Olark, Tawk.to, Re:amaze, Groove, Hiver, ServiceNow, Helpjuice, Aircall, Dialpad, RingCentral, 8x8, Talkdesk, Five9, Genesys, Ringover, CloudTalk, JustCall, Yellow.ai, Ada, Botpress, ManyChat, Chatfuel, Voiceflow, Userlike, Smartsupp. Each has a page with its agreement, usual role and data location, checked on 1 November 2026.
Other categories
Privacyboard is not affiliated with these vendors. Checked on 1 November 2026. This is guidance, not legal advice.