Compliance
View all- SOC 2 Type IIIn progress
- ISO 27001In progress
- GDPR documentation
- § 203 StGB
- Core EU hosting
Resources
View allAudit reports
Other resources
Terms and Conditions — Business Customers (Geschäftskunden)Allgemeine Geschäftsbedingungen — GeschäftskundenTerms and Conditions — Consumers (Privatkunden)Allgemeine Geschäftsbedingungen — PrivatkundenProduct Privacy NoticeDatenschutzhinweiseFAQ
View allHow is customer data isolated?
Each workspace belongs to one organisation. Only signed-in members with the right role can access it. Exports and deletions are logged.
Where is my data stored?
Core workspace and account data is hosted in the EU. Standard AI, voice, and default web search use EU regions — see Subprocessors.
Who can access my data?
Your users, according to workspace roles. AUVY staff have limited access for support and operations. Owners can export or delete data; those actions are logged.
How is data encrypted?
Connections use modern TLS. Data at rest is encrypted. Documents and connected-account secrets get additional protection.
What are your retention periods?
You can export workspace content anytime. After the contract ends, we delete on the timelines in the data processing agreement and privacy notice (typically 30 days for workspace content). Activity logs are kept about 12 months. Billing records follow the law.
Subprocessors
View allHetzner Online GmbH
EU (Helsinki)
Amazon Web Services EMEA SARL
EU (Frankfurt)
Microsoft Ireland Operations Ltd.
EU (Frankfurt) · Azure EU (Sweden)
