### Answer Retell AI is GDPR compliant [(1) ]() [(2) ]() . The platform complies with the General Data Protection Regulation (GDPR) by utilizing Amazon Web Services (AWS) , which includes a GDPR-compliant Data Processing Addendum (DPA) in its Service Terms [(1) ]() . Retell AI's Business Associate Agreement (BAA) and Data Processing Addendum (DPA, including EU Standard Contractual Clauses) are available for self-signing at [click-agreements.retellai.com]() . The DPA/SCCs are required for processing personal data of EU/UK residents under GDPR . Additionally, Retell AI maintains the following certifications : - HIPAA compliant for handling protected health information (PHI) - SOC 2 Type 1 and Type 2 independently audited controls for security, availability, and confidentiality - GDPR compliant via AWS infrastructure with a GDPR-compliant Data Processing Addendum You can access certificates, reports, and the latest audit status in the [Compliance Trust Center]() . Regarding the AI Act, I don't have specific information about Retell AI's compliance with the EU AI Act in the available sources. For information about how LLM providers handle conversation data and whether they use it for training, I don't have explicit documentation in the sources provided. For detailed questions about data handling practices with specific LLM providers or AI Act compliance, I recommend visiting the [Documentation]() or contacting Retell AI directly.

​ To learn more, see the sources I considered: [[1] Security and compliance](https://docs.retellai.com/general/compliance) [[2] ](https://www.retellai.com/resources/retell-ai-insurance-agent-faster-claims-intake) ​

Feel free to tag @AI Evy with additional questions. I also appreciate feedback, it helps me improve.

### Answer To whitelist Retell's SIP traffic in Twilio, you need to add the CIDR block

18.98.16.120/30

to your *IP Access Control List (ACL) * [(1) ]() [(2) ]() . The ACL page you found is the correct location. Here's how to set it up: 1. In your Twilio Elastic SIP Trunk settings, navigate to the Termination section 2. Scroll to IP Access Control Lists 3. Add the CIDR block

18.98.16.120/30

to whitelist Retell's traffic This IP whitelisting is required for your elastic SIP trunk to accept outbound requests from Retell [(1) ]() . **Important note**: If you're using credential-based authentication (username and password) for your SIP trunk instead of IP whitelisting, you don't need to add the CIDR block to the ACL [(3) ]() . You can use either IP whitelisting or credentials—not necessarily both [(1) ]() . For your Italy number setup, the same CIDR block applies regardless of the country where your Twilio number is located [(2) ]() .

​ To learn more, see the sources I considered: [[1] Twilio](https://docs.retellai.com/deploy/twilio) [[2] Connect Retell voice agents to custom telephony](https://docs.retellai.com/deploy/custom-telephony) [[3] Agent transfers not working](https://discord.com/channels/1186424376300679209/1442905165354242119) ​

Feel free to tag @AI Evy with additional questions. I also appreciate feedback, it helps me improve.