Subject: Urgent Roadmap Request – EU-U.S. DPF Certification for Vapi / Superpowered Labs Inc.

Hi Vapi-Team

I want to raise an urgent request regarding certification under the EU-U.S. Data Privacy Framework (DPF). Given the legal environment in the EU, the absence of DPF certification imposes significant challenges for compliant operation of services like Vapi. While GDPR-compliant use without this certification is theoretically possible, in practice it forces EU companies to implement a complex and fragmented patchwork of technical and organizational safeguards. This not only creates serious operational overhead but also leaves room for legal uncertainty and exposure to risk, especially for data-intensive applications like real-time voice assistants.

From the EU perspective, the current situation is increasingly untenable. The legal pressure on data processors and controllers has intensified and many EU-based companies are either holding back or introducing local workarounds that reduce functionality or increase costs. DPF certification would directly address this and massively lower the threshold for adoption. It would eliminate the need for additional safeguards, offer legal clarity and open the door much wider to the European market.

I strongly urge you to prioritize DPF certification and clarify whether it is already on the roadmap. If not, it should be added as a critical compliance and market enablement step.

Looking forward to your reply.