Skip to content

GDPR checklist for customer support tools.

Support tools store conversations, attachments and customer identifiers, often for years. Compare 34 common tools and see what to check for each.

Compared at a glance

ToolUsual roleData locationAgreement
IntercomUsually a processorSet per account or projectPublished by the vendor
ZendeskUsually a processorSet per account or projectPublished by the vendor
CrispUsually a processorSet per account or projectObtained through the vendor
Help ScoutUsually a processorSet per account or projectPublished by the vendor
FreshdeskUsually a processorSet per account or projectPublished by the vendor
GorgiasUsually a processorSet per account or projectPublished by the vendor
KustomerUsually a processorSet per account or projectPublished by the vendor
TidioUsually a processorSet per account or projectPublished by the vendor
LiveChatUsually a processorSet per account or projectObtained through the vendor
OlarkUsually a processorSet per account or projectPublished by the vendor
Tawk.toUsually a processorSet per account or projectPublished by the vendor
Re:amazeUsually a processorSet per account or projectPublished by the vendor
GrooveUsually a processorSet per account or projectPublished by the vendor
HiverUsually a processorUsually the United StatesObtained through the vendor
ServiceNowUsually a processorSet per account or projectPublished by the vendor
HelpjuiceUsually a processorSet per account or projectObtained through the vendor
AircallUsually a processorSet per account or projectPublished by the vendor
DialpadUsually a processorSet per account or projectObtained through the vendor
RingCentralUsually a processorSet per account or projectPublished by the vendor
8x8Usually a processorSet per account or projectPublished by the vendor
TalkdeskUsually a processorSet per account or projectObtained through the vendor
Five9Usually a processorSet per account or projectPublished by the vendor
GenesysUsually a processorSet per account or projectObtained through the vendor
RingoverUsually a processorSet per account or projectPublished by the vendor
CloudTalkUsually a processorSet per account or projectObtained through the vendor
JustCallUsually a processorOften the United States, check your accountObtained through the vendor
Yellow.aiUsually a processorSet per account or projectPublished by the vendor
AdaUsually a processorSet per account or projectPublished by the vendor
BotpressUsually a processorOften the United States, check your accountPublished by the vendor
ManyChatUsually a processorOften the European Union, check your accountPublished by the vendor
ChatfuelUsually a processorSet per account or projectObtained through the vendor
VoiceflowUsually a processorSet per account or projectPublished by the vendor
UserlikeUsually a processorUsually GermanyObtained through the vendor
SmartsuppUsually a processorOften Germany, check your accountPublished by the vendor

What to check for customer support tools

  • Set a retention period for closed conversations and attachments.
  • Check how you would find and delete one person’s conversations when they ask.
  • Review which team members and integrations can read the data.
  • Record where the data is stored and any transfers outside the EEA.
FAQ

Questions, answered.

What should I check before using a customer support tool under the GDPR?

Set a retention period for closed conversations and attachments. Check how you would find and delete one person’s conversations when they ask. Review which team members and integrations can read the data. Record where the data is stored and any transfers outside the EEA.

Do I need a data processing agreement with a customer support provider?

If the provider handles personal data on your behalf, yes: Article 28 of the GDPR requires a written contract. Some providers publish the text, others give it to you inside your account. Providers that decide their own purposes may act as independent controllers instead, so check the role.

Which customer support tools does Privacyboard cover?

Intercom, Zendesk, Crisp, Help Scout, Freshdesk, Gorgias, Kustomer, Tidio, LiveChat, Olark, Tawk.to, Re:amaze, Groove, Hiver, ServiceNow, Helpjuice, Aircall, Dialpad, RingCentral, 8x8, Talkdesk, Five9, Genesys, Ringover, CloudTalk, JustCall, Yellow.ai, Ada, Botpress, ManyChat, Chatfuel, Voiceflow, Userlike, Smartsupp. Each has a page with its agreement, usual role and data location, checked on 1 November 2026.

Other categories

Privacyboard is not affiliated with these vendors. Checked on 1 November 2026. This is guidance, not legal advice.

Be ready before they ask.

Start with your website address. In about 5 minutes your first documents are ready, with no password to create.

Start free