security identity · published

Contact centre AI data residency retention and training boundaries

Verified 2026-09-05 · 95 sources · tier 1–4

Also known as AI Act, EU AI Act, GDPR, Voicea.

Cisco documents data residency, model training boundaries, and retention policies across Webex Contact Center, Webex Contact Center Enterprise, and broader Webex suite services 41​8​39. These operational practices intersect with statutory compliance frameworks governing automated decision-making and emotion recognition 24​22.

Data residency and cross-border transfers

In Cisco's Webex data-centre table, Webex Contact Center is listed with region-specific data residency in the United States, the European Union, Canada, the United Kingdom, Japan, Australia, Singapore, and India, and is not listed with residency in Saudi Arabia or the United Arab Emirates 41. A Webex Contact Center tenant is established in the data centre nearest to the Country of Operation chosen in the setup wizard's Contact Center tab, following a defined country-to-data-centre mapping 42. Once an organisation is created within a given geographic residency location, Cisco does not support migrating its data to another geography 30.

Cisco states that AI-generated content for meetings and messages is stored in the same data centre as the underlying user-generated content to keep data within the same geographic region; this specific statement names meetings and messages and does not name contact centre 38. WarmTransfer's reading of the sources is that none of the read Cisco sources names Auto CSAT, Agent Answers, Virtual Agent-Voice, or AI Agent Studio in a residency, retention, or training context 31. Furthermore, WarmTransfer's reading of the sources is that none of the read Cisco sources mentions FedRAMP, Webex for Government, or sovereign-cloud offerings for contact-centre AI 29.

Webex Contact Center Enterprise is built on Cisco Unified Communications Manager as its core call-processing engine, which is a different product from cloud Webex Contact Center 8. For Webex Contact Center Enterprise, user-generated information resides in the data centre closest to the customer, but other data may be sent to Texas and Colorado over MPLS circuits for system and security monitoring 7. Webex Contact Center Enterprise relies on several cross-border data transfer mechanisms:

  • Binding Corporate Rules for controllers 3
  • APEC Cross-Border Privacy Rules 3
  • APEC Privacy Recognition for Processors 3
  • EU Standard Contractual Clauses 3
  • EU-US Data Privacy Framework with its UK extension 3
  • Swiss-US Data Privacy Framework 3

Under the General Data Protection Regulation, personal data transfers to a third country or international organisation require meeting Chapter V conditions, including for onward transfers, to protect the statutory level of protection 25. Without an adequacy decision, transfers require appropriate safeguards offering enforceable data subject rights and effective remedies, such as standard contractual clauses, binding corporate rules, approved codes of conduct, or approved certification mechanisms 23. Third-country administrative or court orders compelling disclosure or transfer are recognisable or enforceable only when grounded in an international agreement, such as a mutual legal assistance treaty, in force between that country and the EU or an EU Member State 26.

Model training and AI transparency

Cisco states that Webex does not use customer content to train models by default, relying instead on synthetic data, Cisco-internal data, or off-the-shelf datasets 39. For external foundation models, Cisco states that third-party provider Microsoft represents it does not use customer content to improve Azure OpenAI models and does not store or retain Cisco customer data within Azure infrastructure 27.

Cisco publishes an AI Transparency Technical Note for each model used across generally available Collaboration solutions and optional add-ons 36. These notes are indexed by model rather than by product feature, and are accessible via the Cisco Trust Portal, webex.ai, or the Webex Help Center AI page 36.

In Webex Contact Center Enterprise, the privacy data sheet states that personal data in voice recordings and chat transcripts can be stored for system training and quality management purposes, without specifying if system training encompasses machine-learning model training 9.

Data retention and sub-processors

Cisco's Data Security, Privacy, and Residency in Webex Contact Center article (dated 17 August 2026) includes 2 unfilled authoring-template placeholders: [Your Company] in the sub-processor incident-accountability text, and [X] for both AI Agent Session History retention and knowledge-source re-indexing latency 40. The retention period for Webex Contact Center AI Agent session history is not stated because the retention table cell displays the literal placeholder X 1.

For Webex Contact Center Enterprise, customer content—including call recordings, transcriptions, chat transcripts, emails, and screen captures—is retained during an active subscription, and user-generated data is deleted within 28 days following customer service termination 4. Webex Contact Center Enterprise lists Google as an optional sub-processor for transcription via Google CCAI, and Calabrio as an optional sub-processor for long-term cloud storage of voice recordings, with both delivered in the region where the customer is provisioned 6.

Encryption and security controls

Webex Contact Center Enterprise protects data at rest using Transparent Data Encryption and self-encrypting drives with AES 256-bit keys, and protects data in transit using TLS 1.2 5. WarmTransfer's reading of the sources is that no read Cisco source offers a bring-your-own-key or customer-managed encryption key option for contact-centre data; the documented key controls reference Cisco-managed keys inside a regional Key Management Service and Cisco-managed at-rest encryption 28. WarmTransfer's reading of the sources is also that none of the read Cisco sources documents a personally-identifiable-information detection or redaction mechanism for contact-centre transcripts or recordings 32.

European Union regulatory obligations

The EU Artificial Intelligence Act defines an emotion recognition system as an AI system intended to identify or infer natural persons' emotions or intentions from their biometric data 15. The regulation prohibits deploying AI systems to infer emotions of natural persons in workplace and education settings, except for medical or safety reasons 22. This prohibition under Article 5(1)(f) applies to agent-facing emotion recognition in contact centres 18. Customer-facing emotion recognition is not prohibited; instead, Annex III point 1(c) and Article 6(2) classify non-prohibited emotion recognition as high-risk, triggering Chapter III deployer mandates 17​18.

High-risk AI deployments introduce specific operational requirements under Article 26:

  • High-risk system deployers must preserve automatically generated system logs within their control for at least 6 months, or an appropriate period for the system's purpose, unless Union or national law sets other retention limits 14.
  • Employers deploying high-risk AI systems in the workplace must notify affected workers and workers' representatives prior to putting the system into service 21.
  • Deployer obligations under Article 26 apply regardless of whether an Article 27 fundamental rights impact assessment is mandatory 20. The fundamental rights impact assessment applies to bodies governed by public law, private entities delivering public services, and credit or insurance evaluation deployers under Annex III points 5(b) and 5(c); it does not on its face bind standard private commercial contact centres deploying emotion recognition 19.

The EU Artificial Intelligence Act requires providers to design AI systems intended to interact directly with natural persons so that those persons are informed they are interacting with an AI system, unless that is obvious to a reasonably well-informed and observant person given the context 13. Deployers of emotion recognition or biometric categorisation systems must also inform exposed individuals of the system's operation and process resulting personal data under governing data protection rules 16.

The General Data Protection Regulation gives a data subject the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects them, and requires at minimum a right to human intervention, to express a view and to contest the decision where an exception applies 24.

See also

Applicability

Applies to: Cisco Webex Contact Center, Cisco Webex, Cisco Webex Contact Center Enterprise, European Union Artificial Intelligence Act, and European Union General Data Protection Regulation. Deployments: cloud, contact-center-enterprise, not-applicable, and webex-suite. Sources checked 2026-09-04. Webex Contact Center data residency excludes Saudi Arabia and the United Arab Emirates 41. European Union Artificial Intelligence Act rules apply across the European Union 15​22.

What remains uncertain

Whether the residency article's specific claims are true despite its unfilled template placeholders is not covered by the sources below. The authoritative country to data centre mapping for Webex Contact Center is not covered by the sources below. Which Webex Contact Center regions actually send inference outside the region is not covered by the sources below. A privacy data sheet for cloud Webex Contact Center as distinct from Contact Center Enterprise is not covered by the sources below. The per-model AI transparency technical notes for contact centre AI features are not covered by the sources below. Exact retention periods for cloud Webex Contact Center recordings transcripts and AI session data are not covered by the sources below. Whether any automatic PII or payment card redaction exists for recordings and transcripts is not covered by the sources below. An authoritative Cisco sub-processor list for cloud Webex Contact Center is not covered by the sources below.

See also

Affects

Depends on

Governed by

Parallels

Referenced by

Sources

  1. 1
    The retention period for AI Agent session history in Webex Contact Center is not stated: the cell in Cisco's retention table that should carry it contains the literal placeholder X.
    Data Security, Privacy, and Residency in Webex Contact Center · Data Retention and Lifecycle Management table, AI Agent Session History row · Checked 2026-09-04
  2. 2
    In Cisco's AI Agent region table, Azure OpenAI large language model processing is listed as Global for the Canada, Japan, Australia and Singapore regions, with a footnote stating those requests can end up in any data centre globally where the models are hosted.
    Data Security, Privacy, and Residency in Webex Contact Center · Data Residency for AI Agents table, footnote marked with a single asterisk · Checked 2026-09-04
  3. 3
    Webex Contact Center Enterprise relies on Binding Corporate Rules for controllers, APEC Cross-Border Privacy Rules, APEC Privacy Recognition for Processors, EU Standard Contractual Clauses, the EU-US Data Privacy Framework with its UK extension, and the Swiss-US Data Privacy Framework as its cross-border transfer mechanisms.
    Cisco Webex Contact Center Enterprise Privacy Data Sheet · Section 4, Cross-Border Data Transfer Mechanisms · Checked 2026-09-04
  4. 4
    For Webex Contact Center Enterprise, customer content including call recordings, transcriptions, chat transcripts, screen captures and emails is retained while the subscription is active and user-generated information is deleted within 28 days after the customer terminates the service.
    Cisco Webex Contact Center Enterprise Privacy Data Sheet · Section 6, Data Retention, Customer Content row · Checked 2026-09-04
  5. 5
    Webex Contact Center Enterprise encrypts data at rest using self-encrypting drives and Transparent Data Encryption, both with AES 256-bit key strength, and encrypts data in transit with TLS 1.2.
    Cisco Webex Contact Center Enterprise Privacy Data Sheet · Section 7, Personal Data Security · Checked 2026-09-04
  6. 6
    Webex Contact Center Enterprise names Google as an optional sub-processor providing transcription through Google CCAI, and Calabrio as an optional sub-processor for long-term cloud storage of voice recordings, both provided in the region where the customer is provisioned.
    Cisco Webex Contact Center Enterprise Privacy Data Sheet · Section 8, Sub-processors · Checked 2026-09-04
  7. 7
    For Webex Contact Center Enterprise, user-generated information is stored in the data centre closest to the customer, but other data may be sent to Texas and Colorado over MPLS circuits for system and security monitoring.
    Cisco Webex Contact Center Enterprise Privacy Data Sheet · Section 3, Data Center Locations · Checked 2026-09-04
  8. 8
    The Webex Contact Center Enterprise privacy data sheet describes a product built on Cisco Unified Communications Manager as its core call-processing engine, which is a different product from the cloud Webex Contact Center.
    Cisco Webex Contact Center Enterprise Privacy Data Sheet · Section 1, Overview · Checked 2026-09-04
  9. 9
    The Webex Contact Center Enterprise privacy data sheet states that the product can store personal data in voice recordings and chat transcripts for quality management and system training purposes, without defining whether system training includes machine-learning model training.
    Cisco Webex Contact Center Enterprise Privacy Data Sheet · Section 2, Personal Data Processing · Checked 2026-09-04
  10. 10
    Cisco's Webex Contact Center residency article names Deepgram and ElevenLabs as speech and transcription sub-processors, describing them as EU-based for certain tasks and stating 0 data retention after processing.
    Data Security, Privacy, and Residency in Webex Contact Center · Data Residency for AI Agents table; closing bullets · Checked 2026-09-04
  11. 11
    Cisco's Webex Contact Center residency article names 8 AI regions and gives per-region processing and storage locations: produs1 for the United States, prodeu1 for the United Kingdom, prodeu2 for the European Union, prodca1 for Canada, prodjp1 for Japan, prodanz1 for Australia, prodsg1 for Singapore and prodin1 for India.
    Data Security, Privacy, and Residency in Webex Contact Center · Data Residency for AI Agents in Webex Contact Center table · Checked 2026-09-04
  12. 12
    Cisco states that during real-time transcription or speech synthesis, data exists only in the volatile memory of the processing engine and is purged immediately after use, with no data stored or retained after processing.
    Data Security, Privacy, and Residency in Webex Contact Center · Ephemeral Processing and Zero Retention · Checked 2026-09-04
  13. 13
    The EU Artificial Intelligence Act requires providers to design AI systems intended to interact directly with natural persons so that those persons are informed they are interacting with an AI system, unless that is obvious to a reasonably well-informed and observant person given the context.
  14. 14
    The EU Artificial Intelligence Act requires deployers of high-risk AI systems to keep the logs the system generates automatically, to the extent those logs are under their control, for a period appropriate to the system's purpose and of at least 6 months, unless other Union or national law provides otherwise.
  15. 15
    The EU Artificial Intelligence Act defines an emotion recognition system as an AI system for the purpose of identifying or inferring emotions or intentions of natural persons on the basis of their biometric data.
  16. 16
    The EU Artificial Intelligence Act requires deployers of an emotion recognition or biometric categorisation system to inform the natural persons exposed to it of the system's operation and to process the resulting personal data in accordance with the applicable data protection law.
  17. 17
    Emotion recognition is listed in Annex III point 1(c) of the EU Artificial Intelligence Act, which Article 6(2) incorporates by reference, so an emotion recognition use that is not prohibited is classified as high-risk and carries the Chapter III obligations.
  18. 18
    Article 5(1)(f) of the EU Artificial Intelligence Act prohibits emotion recognition systems in the workplace, which covers agent-facing emotion recognition in a contact centre; this is the prohibited case, distinct from customer-facing emotion recognition, which is high-risk rather than prohibited.
  19. 19
    The EU Artificial Intelligence Act's fundamental rights impact assessment obligation applies to deployers that are bodies governed by public law, private entities providing public services, and deployers of the credit and insurance systems in Annex III points 5(b) and 5(c); it does not on its face apply to an ordinary private commercial contact centre deploying an emotion recognition system.
  20. 20
    Article 26 obligations for deployers under the EU Artificial Intelligence Act still apply even where the Article 27 fundamental rights impact assessment obligation does not.
  21. 21
    The EU Artificial Intelligence Act requires an employer deploying a high-risk AI system at the workplace to inform workers' representatives and the affected workers, before putting the system into service or use, that they will be subject to it.
  22. 22
    The EU Artificial Intelligence Act prohibits the use of AI systems to infer emotions of a natural person in the areas of workplace and education institutions, except where the system is intended for medical or safety reasons.
  23. 23
    Absent an adequacy decision, the General Data Protection Regulation permits a transfer where the controller or processor provides appropriate safeguards with enforceable data subject rights and effective legal remedies, which may take the form of binding corporate rules, standard contractual clauses, approved codes of conduct or approved certification mechanisms.
    Regulation (EU) 2016/679 General Data Protection Regulation · Article 46(1) and 46(2) · Checked 2026-09-04
  24. 24
    The General Data Protection Regulation gives a data subject the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects them, and requires at minimum a right to human intervention, to express a view and to contest the decision where an exception applies.
    Regulation (EU) 2016/679 General Data Protection Regulation · Article 22(1) to 22(4) · Checked 2026-09-04
  25. 25
    The General Data Protection Regulation allows a transfer of personal data to a third country or international organisation only where the conditions of Chapter V are met, including for onward transfers, so that the level of protection guaranteed by the Regulation is not undermined.
  26. 26
    The General Data Protection Regulation provides that a judgment of a third-country court or a decision of a third-country administrative authority requiring a controller or processor to transfer or disclose personal data is only recognisable or enforceable if it is based on an international agreement in force between that country and the European Union or a Member State.
  27. 27
    Cisco states that its third-party model provider Microsoft represents it will not use customer content to improve Azure OpenAI models and does not store or retain Cisco customer data in Azure infrastructure.
    AI Development, Data Privacy, Security, and Safety · Data Sources for Training and Evaluation · Checked 2026-09-04
  28. 28
    No Cisco source read for this topic offers a customer-managed encryption key or bring-your-own-key option for contact-centre data; the only key statements describe Cisco-managed keys in a regional Key Management Service and Cisco-managed at-rest encryption.inferred
    Data residency in Webex · whole document, absence confirmed by case-insensitive search across all five Cisco sources · Checked 2026-09-04
  29. 29
    None of the Cisco sources read for this topic mentions FedRAMP, Webex for Government, or any sovereign-cloud offering for contact-centre AI.inferred
    Data residency in Webex · whole document, absence confirmed by case-insensitive search across all five Cisco sources · Checked 2026-09-04
  30. 30
    Cisco does not support migrating an organisation's data between geographic residency locations: once an organisation is created in a given geography it stays there.
    Data residency in Webex · FAQ, What is the recommendation when selecting a country for the GEO location? · Checked 2026-09-04
  31. 31
    None of the Cisco sources read for this topic mentions Auto CSAT, Agent Answers, Virtual Agent-Voice or AI Agent Studio by name in a residency, retention or training context.inferred
    Data Security, Privacy, and Residency in Webex Contact Center · whole document, absence confirmed by case-insensitive search across all five Cisco sources · Checked 2026-09-04
  32. 32
    None of the Cisco sources read for this topic describes a personally-identifiable-information detection or redaction mechanism for contact-centre recordings or transcripts.inferred
    Cisco Webex Contact Center Enterprise Privacy Data Sheet · whole document, absence confirmed by case-insensitive search across all five Cisco sources · Checked 2026-09-04
  33. 33
    Cisco states that contractual and technical barriers ensure customer data, including prompts and audio, is never used to train, retrain or improve foundation models owned by sub-processors.
    Data Security, Privacy, and Residency in Webex Contact Center · Ephemeral Processing and Zero Retention, No Secondary Usage · Checked 2026-09-04
  34. 34
    Cisco's retention table gives operational logs a retention period of 90 days, held for troubleshooting and system health monitoring, and gives real-time audio and transcript a retention period of 0 days, purged immediately after the session ends.
    Data Security, Privacy, and Residency in Webex Contact Center · Data Retention and Lifecycle Management table · Checked 2026-09-04
  35. 35
    Cisco distinguishes data residency, meaning where customer data is persistently stored at rest, from data processing, meaning computation performed on it, and states that data may be processed outside the storage region to reach the GPU capacity needed for large language models and advanced speech recognition.
    Data Security, Privacy, and Residency in Webex Contact Center · Data Processing vs. Data Residency; Regional Data Sovereignty · Checked 2026-09-04
  36. 36
    Cisco publishes an AI Transparency Technical Note for every model used across its generally available Collaboration solutions, including optional add-ons; the notes are organised by model rather than by product feature and are found through the Webex Help Center AI page, the Cisco Trust Portal or webex.ai.
    AI Transparency Technical Notes · General, What are AI Transparency Technical Notes? · Checked 2026-09-04
  37. 37
    Cisco's AI Assistant region table lists Voicea speech-to-text as Global for every region, with a footnote stating Voicea resides in europe-west1 Brussels Belgium and europe-west4 Amsterdam Netherlands, does processing only, and persists no data on Voicea deployment sites.
    Data Security, Privacy, and Residency in Webex Contact Center · Data Residency for AI Assistant table, footnote marked with two asterisks · Checked 2026-09-04
  38. 38
    Cisco states that AI-generated content for meetings and messages is stored in the same data centre as the underlying user-generated content so that all data remains in the same geographic region; the statement names meetings and messages and does not name contact centre.
    Data residency in Webex · Overview bullet list · Checked 2026-09-04
  39. 39
    Cisco states that by default Webex does not use customer content to train models, and instead uses off-the-shelf datasets, Cisco-internal data or synthetic data.
    AI Transparency Technical Notes · AI Transparency, What data does Webex use to train AI models? · Checked 2026-09-04
  40. 40
    Cisco's Data Security, Privacy, and Residency in Webex Contact Center article, dated 17 August 2026, is published with 2 unfilled authoring-template placeholders in its body: [Your Company] in its sub-processor incident-accountability bullet, and [X] used both as the retention value for AI Agent Session History and as a knowledge-source re-indexing latency.
    Data Security, Privacy, and Residency in Webex Contact Center · Sub-processor Governance; Data Retention and Lifecycle Management table; Knowledge Management · Checked 2026-09-04
  41. 41
    In Cisco's Webex data-centre table, Webex Contact Center is marked as having region-specific data residency in the United States, the European Union, Canada, the United Kingdom, Japan, Australia, Singapore and India, and not in Saudi Arabia or the United Arab Emirates.
    Data residency in Webex · Data center location of Webex services and user-generated content table, Webex Contact Center row · Checked 2026-09-04
  42. 42
    A Webex Contact Center tenant is created in the data centre closest to the Country of Operation selected in the setup wizard's Contact Center tab, according to a defined country-to-data-centre mapping.
    Data residency in Webex · Webex Contact Center residency · Checked 2026-09-04
  43. 43
    In 5 of the 8 Webex AI Agent regions - Canada, Japan, Australia and New Zealand, Singapore and India - the Azure OpenAI inference column reads Global, which the table's own footnote defines as processing in any data centre worldwide where the models are hosted.
    Cisco Webex AI Agent AI Transparency Technical Note · section 3 Data Locality table, Azure Open AI column and the asterisk footnote below it · Checked 2026-09-05
  44. 44
    Of the 8 Webex AI Agent regions, only London and Frankfurt are pinned outright (not marked Global) for Azure OpenAI inference, while the United States region reads US Regional plus Global.
    Cisco Webex AI Agent AI Transparency Technical Note · section 3 Data Locality table, Azure Open AI column and the asterisk footnote below it · Checked 2026-09-05
  45. 45
    Cisco names 4 Azure OpenAI models behind autonomous Webex AI Agents: GPT-4o, GPT-4.1-mini, GPT-4.1 and a GPT-4.1 global variant used for variant generation and other features.
    Cisco Webex AI Agent AI Transparency Technical Note · section 2 Model Overview · Checked 2026-09-05
  46. 46
    Cisco states that the large language models powering autonomous AI agents come from Microsoft's Azure OpenAI Service.
    Cisco Webex AI Agent AI Transparency Technical Note · section 2 Model Overview · Checked 2026-09-05
  47. 47
    The Webex AI Agent note publishes a data locality table for 8 named regional deployments: produs1, prodeu1, prodeu2, prodca1, prodjp1, prodanz1, prodsg1 and prodin1.
    Cisco Webex AI Agent AI Transparency Technical Note · section 3 Data Locality for AI Agents Components table, deployment column · Checked 2026-09-05
  48. 48
    For the India Webex AI Agent region the internal model proxy is located in Sydney Australia while the cloud and speech components for the same region are in Mumbai and Central India.
    Cisco Webex AI Agent AI Transparency Technical Note · section 3 Data Locality table, prodin1 row · Checked 2026-09-05
  49. 49
    Cisco states that payment card and protected health information are redacted by default for Webex AI Agent, and that customers may additionally mask names locations health data email addresses phone numbers and internet protocol addresses.
    Cisco Webex AI Agent AI Transparency Technical Note · section 2 Model Overview · Checked 2026-09-05
  50. 50
    Cisco states that customers may enable call recording for voice interactions handled by Webex AI Agents, and publishes no retention period for recordings or for agent transaction data, deferring retention to Offer Disclosures on the Trust Portal.
    Cisco Webex AI Agent AI Transparency Technical Note · section 6 Privacy and Security · Checked 2026-09-05
  51. 51
    For the Singapore Webex AI Agent region the internal model proxy is located in Singapore while the Azure OpenAI inference for the same region is marked as processable in any data centre globally.
    Cisco Webex AI Agent AI Transparency Technical Note · section 3 Data Locality table, prodsg1 row, LLM Proxy and Azure Open AI columns · Checked 2026-09-05
  52. 52
    Cisco states that customer content is used exclusively to customise the Agent Burnout Detection model for that customer's own organisation and is not used to develop or improve the general model or any other customer's model.
    Contact Center: Agent Burnout Detection - AI Transparency Technical Note · Data Sources for Training and Evaluation · Checked 2026-09-05
  53. 53
    Webex Contact Center summarization uses GPT-3.5 Turbo and GPT-4o Mini through the Microsoft Azure OpenAI Service API.
  54. 54
    Cisco states it does not retain the call transcript after inference but does store the generated summary until the user makes a new summary request.
  55. 55
    Cisco states that abuse monitoring, which would require logging data for human verification, is turned off for both Webex Connect artificial intelligence nodes.
    Webex Connect Text Summarization AI Transparency Technical Note · Safety and Ethical Considerations of both Webex Connect notes · Checked 2026-09-05
  56. 56
    Cisco states that the Webex Connect text summarization node applies no personal or health information filtering to the data passed to it and that the user is responsible for masking or removing sensitive data first.
    Webex Connect Text Summarization AI Transparency Technical Note · Usage Guidelines · Checked 2026-09-05
  57. 57
    Cisco states that for European Union customers and for India customers, Topic Analytics transcription and analysis are processed locally within those regions, and that other global customers' data is processed in the relevant United States European Union and Asia Pacific Japan and China regions.
    Cisco Contact Center Topic Analysis AI Transparency Technical Note · Data Sources for Training and Evaluation · Checked 2026-09-05
  58. 58
    Cisco states that during Topic Analytics inference customer data is not stored or retained by the model and that only the generated call drivers and topics are produced.
    Cisco Contact Center Topic Analysis AI Transparency Technical Note · Privacy and Security · Checked 2026-09-05
  59. 59
    Cisco states that Topic Analytics input transcripts are stripped of personally identifiable information using Microsoft's Presidio before call driver extraction.
    Cisco Contact Center Topic Analysis AI Transparency Technical Note · Safety and Ethical Considerations · Checked 2026-09-05
  60. 60
    Topic Analytics chains 2 third-party models: GPT-4o mini hosted by the Azure OpenAI Service for call driver extraction, and Mistral-7B-Instruct-V0.2 hosted on Amazon Bedrock for labelling call topics.
    Cisco Contact Center Topic Analysis AI Transparency Technical Note · Model Architecture · Checked 2026-09-05
  61. 61
    Cisco instructs administrators not to upload Payment Card Industry data, personally identifiable information or protected health information to the AI Agent Studio knowledge base, and makes the customer responsible for upload compliance.
    Webex AI Agent Studio Administration guide · Manage knowledge bases · Checked 2026-09-04
  62. 62
    Cisco states that Microsoft does not use customer content to improve Azure OpenAI models and does not store or retain Cisco customer data in Azure infrastructure.
    Webex AI Agent Studio Administration guide · AI development, data privacy, security, and safety, Data Sources for Training and Evaluation · Checked 2026-09-04
  63. 63
    Cisco states that customer input data is not retained after inference and that the third-party model provider, Microsoft, does not access, monitor or store Cisco customer data.
    Webex AI Agent Studio Administration guide · AI development, data privacy, security, and safety, Privacy and Security · Checked 2026-09-04
  64. 64
    Cisco applies automated pattern detection for PCI data in AI Agent voice recordings and limits recording visibility when it fires, but states explicitly that the detection may not identify every instance.
    Webex AI Agent Studio Administration guide · View autonomous AI agent sessions and history, PCI enforcement note · Checked 2026-09-04
  65. 65
    Advanced debug logs associated with a scripted agent transaction are typically retained for 180 days.
    Webex AI Agent Studio Administration guide · View session details in the scripted AI agent, Debug Logs · Checked 2026-09-04
  66. 66
    An autonomous agent selects 1 of 3 named AI engines: Webex AI Pro 1.0, the multi-language default; Webex AI Pro-US 1.0, English only and available to US customers only; and Webex AI Pro-Europe 1.0, English only and available to Europe customers only.
    Webex AI Agent Studio Administration guide · Create an autonomous AI agent, step 5 · Checked 2026-09-04
  67. 67
    AI Agent conversation transcripts are stored for 90 days and then automatically purged, stated identically for autonomous and scripted agent sessions.
    Webex AI Agent Studio Administration guide · View session details · Checked 2026-09-04
  68. 68
    AI transparency, the disclosure telling a customer they are speaking to an AI, is enabled by default in European regions and optional elsewhere; disabling it requires the administrator to acknowledge the risk and record audit comments.
    Webex AI Agent Studio Administration guide · Understand AI transparency for AI agents · Checked 2026-09-04
  69. 69
    Cisco lists contact centre data among what Webex MCP servers expose to external agents, naming queue states, call transcripts, agent status and routing context alongside meeting context, messaging history and device intelligence.
    What's New for Agentic Apps · What's New for Agentic Apps, Webex MCP Servers for External Agents · Checked 2026-09-05
  70. 70
    No source read states what data leaves Webex during a Model Context Protocol tool call, how long a third party retains it, or any residency logging or audit commitment specific to those calls.inferred
    Webex AI Agent Studio Administration guide · AI development, data privacy, security, and safety and Configure MCP client action, both whole sections · Checked 2026-09-05
  71. 71
    Cisco's statement that it does not retain customer input after inference and that Microsoft does not access monitor or store Cisco customer data concerns the underlying language model provider and not the third-party servers an agent calls.
    Webex AI Agent Studio Administration guide · AI development, data privacy, security, and safety, Privacy and Security · Checked 2026-09-05
  72. 72
    The transition guide distinguishes certifications Cisco holds for Webex Contact Center, naming ISO/IEC 27001, payment card industry data security standard and service organisation control reports, from regimes it says the product can be configured to support including the General Data Protection Regulation and the Health Insurance Portability and Accountability Act.
  73. 73
    The transition guide gives configurable retention periods as an example, 13 months for call detail records generally and 6 months in the European Union, and states data can be deleted on request or on organisation deletion.
  74. 74
    Content generated by the AI Agent and AI Assistant is retained per the customer's configured settings while active and deleted within 60 days of termination.
    Cisco Webex Contact Center Service Offer Disclosure · Table 1 Customer Content, Webex-Generated Content row · Checked 2026-09-05
  75. 75
    Cisco states that the cloud Webex Contact Center offer does not use customer content or customer systems information to train or fine-tune its generative or agentic artificial intelligence.
    Cisco Webex Contact Center Service Offer Disclosure · section 4 Artificial Intelligence, opening paragraph · Checked 2026-09-05
  76. 76
    The Webex Engage offer disclosure contains no artificial intelligence section and no table of generative or agentic features, unlike both Webex Contact Center disclosures.inferred
    Cisco Webex Engage Offer Disclosure · document structure, which ends after the security section · Checked 2026-09-05
  77. 77
    The Webex Contact Center Enterprise offer disclosure lists 5 artificial intelligence features and contains no statement about whether customer content is used to train or fine-tune them.inferred
    Cisco Webex Contact Center Enterprise Offer Disclosure · Table 7 Generative and Agentic AI · Checked 2026-09-05
  78. 78
    The offer disclosure names Google as providing transcription through its contact centre artificial intelligence service and Microsoft Azure as providing the AI Agent and AI Assistant services, alongside Eleven Labs and Nuance for text to speech and Deepgram and Soniox for speech to text.
    Cisco Webex Contact Center Service Offer Disclosure · Table 4 Subprocessors · Checked 2026-09-05
  79. 79
    The offer disclosure enumerates 6 circumstances in which cross-border transfers of personal data may still occur despite a data residency selection, including collaboration outside the region, technical support, optional functionality, registration on a Cisco platform, ordering information and mobile push notifications.
    Cisco Webex Contact Center Service Offer Disclosure · section 2b, paragraph beginning To facilitate certain operations · Checked 2026-09-05
  80. 80
    The Webex Contact Center transfer impact assessment resources document is a single page of links rather than an assessment, asserting continued reliance on the European Union to United States data privacy framework and standard contractual clauses, and listing only the United States under assessments of third countries.
  81. 81
    Cisco states that real agent interactions may be used to support prompt improvement and quality assessment only with explicit client permission, as a strictly opt-in process governed by client agreements.
    Contact Center: Webex Workforce Optimization Agent Assist - AI Transparency Technical Note · Data Sources for Training and Evaluation, page 6 · Checked 2026-09-05
  82. 82
    Workforce Optimization Agent Assist processes agent scheduling requests submitted through an agent-facing interface rather than customer interactions.inferred
    Contact Center: Webex Workforce Optimization Agent Assist - AI Transparency Technical Note · Feature Overview and Model Inputs and Outputs, pages 4 and 6 · Checked 2026-09-05
  83. 83
    Cisco states that its fine-tuned AI Quality Management models are specific to each organisation, that training data is never shared across organisations, and that it does not leave the Webex Contact Center cloud.
    Cisco Webex AI Quality Management AI Transparency Technical Note · Model Architecture and Data Sources for Training and Evaluation, pages 5 and 7 · Checked 2026-09-05
  84. 84
    Cisco states that Google and Microsoft may process but not store transcript or audio information to provide transcription and translation.
  85. 85
    Cisco states it has data usage and privacy agreements with its language model providers that explicitly prohibit those providers from using customer data for their own model training or improvement.
    Cisco Contact Center Suggested Responses AI Transparency Technical Note · Model Overview, Model Architecture · Checked 2026-09-05
  86. 86
    None of the 7 notes read for this topic publishes a regional processing location table, where the Webex AI Agent note publishes 1 for 8 regions.inferred
    Cisco Webex AI Quality Management AI Transparency Technical Note · whole documents, all seven · Checked 2026-09-05
  87. 87
    Third-Party Transcription and Real-Time Translation is powered by Microsoft Azure and Google, using Azure AI Speech to Text, Azure AI Translator, Google Cloud Speech-to-Text and Google Cloud Translation.
    Third-Party Transcription and Real-Time Translation - AI Transparency Technical Note · Model Overview Introduction page 5 and the References list page 8 · Checked 2026-09-05
  88. 88
    Cisco states that it does not retain the input data or the output data from its text to speech model.
    Cisco In-House Text to Speech AI Transparency Technical Note · Privacy and Security, page 6 · Checked 2026-09-05
  89. 89
    Third-party exposure in Webex contact centre artificial intelligence is a property of the individual feature rather than of the product: across the 9 contact centre notes the corpus holds, features variously use Microsoft alone, Microsoft and Google, Microsoft and Amazon, Amazon with Anthropic, Eleven Labs and Deepgram, or no named third party at all.inferred
    Contact Center: Webex Workforce Optimization Enhancements - AI Transparency Technical Note · model architecture sections across the nine contact centre transparency notes in the registry · Checked 2026-09-05
  90. 90
    Cisco states that the Amazon Bedrock language model calls made by Workforce Optimization Enhancements are stateless and do not use or store customer data for model improvement.
    Contact Center: Webex Workforce Optimization Enhancements - AI Transparency Technical Note · Model Architecture and the numbered flow, pages 5 and 7 · Checked 2026-09-05
  91. 91
    Webex Workforce Optimization Enhancements runs on Amazon Bedrock using Anthropic and Amazon Nova models together with Cisco's own transformer-based models.
    Contact Center: Webex Workforce Optimization Enhancements - AI Transparency Technical Note · Model Overview, Introduction, page 5 · Checked 2026-09-05
  92. 92
    The Nuance speech recognition and text to speech add-on is described as managed and hosted in Webex Contact Center Enterprise data centres and licensed by port.
  93. 93
    Cisco's best practices guide for building servers tells third-party developers to encrypt at rest with per-tenant keys, redact personal information from logs, metrics and telemetry, define retention policies with expiry and secure deletion, and log audit records before an action executes.
    Best Practices for Building MCP and A2A Servers · data handling and audit sections · Checked 2026-09-05
  94. 94
    No source read states what Cisco does with data, what it logs, or what it audits when an external client calls a Cisco-run Webex server.inferred
    Connect to Webex Agentic MCP Servers · whole-document scan of the thirteen sources read for this topic · Checked 2026-09-05
  95. 95
    The virtual agent transcript tool retrieves a conversation transcript for 1 contact and states that it requires appropriate scope and entitlement because it can expose conversation content.
    Contact Center Operation MCP Server · Tools table, artificial intelligence and virtual agents row · Checked 2026-09-05

Documents

tier 1 standards and regulators

Regulation (EU) 2016/679 General Data Protection Regulation

Publications Office of the European Union (EUR-Lex) · 2016-04-27 · accessed 2026-09-04

tier 1 standards and regulators

Regulation (EU) 2024/1689 of the European Parliament and of the Council laying down harmonised rules on artificial intelligence (Artificial Intelligence Act)

Publications Office of the European Union (EUR-Lex) · 2024-06-13 · accessed 2026-09-05

tier 2 current vendor documentation

AI Development, Data Privacy, Security, and Safety

Cisco Systems, Inc. (Webex Help Center) · 2024-09-07 · accessed 2026-09-04

tier 2 current vendor documentation

Best Practices for Building MCP and A2A Servers

Cisco Systems, Inc. (Webex for Developers) · 2026-09-09 · accessed 2026-09-16

tier 2 current vendor documentation

Cisco Collaboration Flex Plan Webex Contact Center Enterprise Add-On Overview

Cisco Systems, Inc. · 2020-04-20 · accessed 2026-09-05

tier 2 current vendor documentation

Cisco Contact Center Suggested Responses AI Transparency Technical Note

Cisco Systems, Inc. (Cisco Trust Portal) · 2026-09-01 · accessed 2026-09-05

tier 2 current vendor documentation

Cisco Contact Center Topic Analysis AI Transparency Technical Note

Cisco Systems, Inc. (Cisco Trust Portal) · 2026-04-09 · accessed 2026-09-05

tier 2 current vendor documentation

Cisco In-House Text to Speech AI Transparency Technical Note

Cisco Systems, Inc. (Cisco Trust Portal) · 2026-04-01 · accessed 2026-09-05

tier 2 current vendor documentation

Cisco Webex AI Agent AI Transparency Technical Note

Cisco Systems, Inc. (Cisco Trust Portal) · 2026-07-28 · accessed 2026-09-05

tier 2 current vendor documentation

Cisco Webex AI Quality Management AI Transparency Technical Note

Cisco Systems, Inc. (Cisco Trust Portal) · 2026-03-01 · accessed 2026-09-05

tier 2 current vendor documentation

Cisco Webex Contact Center Enterprise Offer Disclosure

Cisco Systems, Inc. (Cisco Trust Portal) · 2025-09-01 · accessed 2026-09-05

tier 2 current vendor documentation

Cisco Webex Contact Center Enterprise Privacy Data Sheet

Cisco Systems, Inc. (Cisco Trust Portal) · accessed 2026-09-04

tier 2 current vendor documentation

Cisco Webex Contact Center Service Offer Disclosure

Cisco Systems, Inc. (Cisco Trust Portal) · 2026-06-01 · accessed 2026-09-05

tier 2 current vendor documentation

Cisco Webex Contact Center Transfer Impact Assessment Resources

Cisco Systems, Inc. (Cisco Trust Portal) · 2024-04-17 · accessed 2026-09-05

tier 2 current vendor documentation

Cisco Webex Engage Offer Disclosure

Cisco Systems, Inc. (Cisco Trust Portal) · 2025-09-01 · accessed 2026-09-05

tier 2 current vendor documentation

Connect to Webex Agentic MCP Servers

Cisco Systems, Inc. (Webex for Developers) · 2026-07-02 · accessed 2026-09-16

tier 2 current vendor documentation

Contact Center Operation MCP Server

Cisco Systems, Inc. (Webex for Developers) · 2026-08-28 · accessed 2026-09-16

tier 2 current vendor documentation

Contact Center: Agent Burnout Detection - AI Transparency Technical Note

Cisco Systems, Inc. (Cisco Trust Portal) · 2025-01-22 · accessed 2026-09-05

tier 2 current vendor documentation

Contact Center: Call Summaries and Handoff to Agent - AI Transparency Technical Note

Cisco Systems, Inc. (Cisco Trust Portal) · 2025-01-22 · accessed 2026-09-05

tier 2 current vendor documentation

Contact Center: Transitioning from Cisco Unified Contact Center Enterprise to Webex Contact Center Deployment Guide

Cisco Systems, Inc. · 2026-03-01 · accessed 2026-09-05

tier 2 current vendor documentation

Contact Center: Webex Workforce Optimization Agent Assist - AI Transparency Technical Note

Cisco Systems, Inc. (Cisco Trust Portal) · 2026-01-01 · accessed 2026-09-05

tier 2 current vendor documentation

Contact Center: Webex Workforce Optimization Enhancements - AI Transparency Technical Note

Cisco Systems, Inc. (Cisco Trust Portal) · 2025-12-01 · accessed 2026-09-05

tier 2 current vendor documentation

Data residency in Webex

Cisco Systems, Inc. (Webex Help Center) · 2026-09-08 · accessed 2026-09-16

tier 2 current vendor documentation

Data Security, Privacy, and Residency in Webex Contact Center

Cisco Systems, Inc. (Webex Help Center) · 2026-08-17 · accessed 2026-09-04

tier 2 current vendor documentation

Third-Party Transcription and Real-Time Translation - AI Transparency Technical Note

Cisco Systems, Inc. (Cisco Trust Portal) · 2024-04-01 · accessed 2026-09-05

tier 2 current vendor documentation

Webex AI Agent Studio Administration guide

Cisco Systems, Inc. (Webex Help Center) · 2026-09-03 · accessed 2026-09-04

tier 2 current vendor documentation

Webex Connect Text Summarization AI Transparency Technical Note

Cisco Systems, Inc. (Cisco Trust Portal) · 2024-03-11 · accessed 2026-09-05

tier 2 current vendor documentation

What's New for Agentic Apps

Cisco Systems, Inc. (Webex Help Center) · 2026-09-04 · accessed 2026-09-05

tier 4 archived vendor documentation

AI Transparency Technical Notes

Cisco Systems, Inc. (cisco.com) · accessed 2026-09-04

Cite this page

APA

WarmTransfer. (2026, September 5). Contact centre AI data residency retention and training boundaries. WarmTransfer. https://warmtransfer.net/knowledge/ai-data-residency-governance

BibTeX

@misc{warmtransfer-ai-data-residency-governance,
  title  = {Contact centre AI data residency retention and training boundaries},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/ai-data-residency-governance},
  note   = {Verified 2026-09-05}
}