Hear your people, the way the UK and Europe expect.
Organisations in the UK and Europe consult their people carefully and protect what they say. Here is where a Reccie discovery keeps its data, who handles it, and how Scout sits alongside works councils and staff representatives.
Where your data lives.
- One isolated environment per client
Each client gets its own Google Cloud project, network and database. Nothing is held in shared infrastructure, and no client’s data is reachable from another’s.
- A hosting region agreed up front
Where your environment is hosted is settled before the discovery starts, and an organisation policy then blocks storage being created anywhere else.
- Every processor accounted for
Analysis runs on Google Cloud, and live voice, meetings, phone, email and decline detection each use a specialist provider. Each is named on our trust page, with what it handles and where it runs.
See who processes your data
Consulting your people, and their representatives.
People only speak plainly when they trust what it is for. These hold for every discovery.
- Anonymous to your organisation
No one at your company sees who said what. What people say becomes findings that trace to roles, never to a name.
- Answers in aggregate
When your executives question the evidence, the answers come in aggregate, and only once at least three people have contributed.
- Studies the work, not the person
Discovery maps how the work gets done. It is never used to judge the people who do it.
- Always clearly AI
Scout says it is AI, never pretends to be a person, and only asks. Anyone can skip a topic or say it isn’t their area.
- Something to share with representatives
A plain account of what taking part involves, written for the people Scout talks with, ready for a works council or staff forum to read before you start.
For your people
GDPR and the UK GDPR.
Who is responsible for what your people say, and how it stays protected when it crosses a border.
- Your organisation decides, we process
Your organisation is the controller of what its people say, and we are its processor. We act only on your documented instructions, under data processing terms that meet Article 28 of the GDPR and the UK GDPR.
- A legal basis that fits employment
Consent is rarely freely given between an employer and the people who work for it, so most organisations rely on their legitimate interests in understanding how the work gets done. We give your team what it needs for that assessment.
- Transfers on standard clauses
Where data leaves the UK or the European Economic Area, transfers are made under the European Commission’s standard contractual clauses and, for the UK, the International Data Transfer Agreement or the UK Addendum, with the information your transfer risk assessment needs.
- Rights handled through you
A request from one of your people comes to you as the controller, and we help you answer it in time. If a breach ever touches your data, we tell you without undue delay, so you can meet your own deadline to report it.
The EU AI Act.
Where Reccie stands on the three parts of the Act that matter most for a system that talks with your people.
- People always know it is AI
Scout tells everyone it speaks with that it is AI, and never presents as a person. That is the transparency the EU AI Act requires of a system that talks with people.
- No emotion recognition
The AI Act bans inferring workers’ emotions from biometric data such as voice or facial expression. Reccie does neither. Scout works from the words people choose to say, never from how their voice sounds or how they look.
- It does not evaluate people
Reccie is built to map how work gets done, not to monitor, rate or make decisions about the people who do it. Findings trace to roles, never to names, and your agreement rules out using the discovery to evaluate individuals.
What data protection teams ask first.
Do you offer a data processing agreement?
Yes. Data protection terms are agreed with every client before a discovery starts, covering how your people’s data is handled, where it is held and every provider that touches it. If your organisation has its own agreement, we are glad to work from that.
Should we involve our works council?
Where your organisation consults one on new ways of gathering information from staff, yes, and early. We will walk them through what Scout asks, who sees what, and what the discovery produces.
Which providers process data, and where?
The Trust page lists every provider, what it handles and where it runs, and we name each one in full for your security review.
Bring one process you worry about.
- 1Thirty minutes with the team. No preparation needed from your side.
- 2We walk through a demonstration discovery, and the blueprint behind it.
- 3We tell you plainly whether discovery fits, and what it would cover.