Data handling
Where customer data lives, who can access it, how it is encrypted, and how long it is kept.
Last updated: 2026-08-03
Where is data stored?
Core workspace and account data is stored in the EU. Optional parsing and sandbox paths may use provider-managed regions when invoked.
| Category | Detail |
|---|---|
| Workspace content | EU (Helsinki) — documents, files, and product data |
| Accounts & access | EU (Helsinki) — sign-in, sessions, and membership |
| Web application | EU (Frankfurt) — product website and app delivery |
| AI features | EU (Frankfurt) — approved model providers |
| Voice | Azure EU (Sweden) — speech-to-text |
| Web search | EU — Linkup |
| Realtime collaboration | EU (Helsinki) — OpenPulse, operated by AUVY |
Who has access?
Only people in your workspace — and AUVY staff with a need to operate the service.
| Category | Detail |
|---|---|
| Your team | Access follows workspace roles for signed-in users |
| Workspace owners | Can export or delete workspace data; those actions are logged |
| AUVY staff | Limited production access for support and operations |
| Professional secrecy (§ 203) | Available for Enterprise under the AVV — activation is contractual, not automatic |
Security-relevant actions, exports, and deletions are recorded in your workspace activity log (typically kept about 12 months).
How is data encrypted?
Data is protected in transit and at rest.
| Category | Detail |
|---|---|
| In transit | TLS 1.2 or higher for connections to AUVY and our providers |
| At rest | Encryption for production databases and file storage |
| Sensitive fields | Extra protection for document contents and connected-account secrets |
Full technical measures are described in the AVV and Product Privacy Notice.
Retention and deletion
You can export anytime. After the contract ends, we delete on the published timelines.
| Category | Detail |
|---|---|
| Account data | While the identity exists; a valid identity-erasure request removes or anonymizes controller data where legally possible |
| Workspace content | Export anytime; owner-authorized workspace deletion or final deletion typically 30 days after contract end. Removing one identity does not automatically delete a shared workspace |
| Activity logs | Typically about 12 months |
| Product analytics | Up to 90 days in identifiable form, then aggregated or anonymized |
| Invoices & accounting vouchers | Generally 8 years under German commercial and tax law |
| Books & annual accounts | May require 10 years; commercial correspondence is generally 6 years |
| AI processing | Provider-side handling follows the applicable service contract and configuration; AUVY does not designate customer data for model training |
Tax, audit, litigation, limitation, or other legal holds can extend the applicable category period. Restricted records are not reused for incompatible purposes.