Skip to content

Changelog

Every material change to our legal documents and the subprocessor register, newest first.

Updates

  1. Release

    Privacy notice for applicants 1.0

    A new notice in English and German tells everyone who applies through career.auvy.ai what AUVY does with their data: what we collect, on which legal basis, who sees it, how long we keep it and how to have it deleted. No AI or algorithm sorts applications, and uploaded files are stored encrypted.

    • Privacy notice for applicants / Datenschutzhinweise für Bewerber1.0
  2. Release

    AI notice 1.0

    A new notice in English and German says where AUVY uses AI, how it tells people they are dealing with an AI, how it marks what it makes, and what stays with a business customer as deployer under Article 50 of the EU AI Act. It also names the one mark still missing: AUVY’s voice in call recordings.

    • AI notice / KI-Hinweis1.0
  3. Terms

    Terms 1.1: weekly AI use, no usage-based fees

    The business and consumer terms now say what the product does. Each plan includes a fair amount of AI per usage week, which starts every Monday at 00:00 UTC. AUVY charges no usage-based fees: the pay-per-use option, its spend cap and the paid add-on are gone. At the weekly limit new AI work pauses until Monday or until a larger plan; reading and review stay open. Invoices stay monthly or yearly. Existing contracts move to 1.1 after the 30-day notice in § 16.

    • AGB Geschäftskunden / Business terms1.01.1
    • AGB Privatkunden / Consumer terms1.01.1
  4. Release

    Version 1.0, first general release

    Every legal document and the subprocessor register start at version 1.0. AUVY now serves its product, sign-in and websites from its own servers in Helsinki, so Vercel Inc. is no longer a subprocessor. Amazon Web Services lists every EU region Amazon Bedrock can route a request to (Frankfurt, Stockholm, Ireland, Paris, Milan, Spain). AI models and compute run at Amazon Web Services, Microsoft Azure and Google Vertex AI, all in EU regions. Sub-processor changes are announced 30 days ahead by email to workspace owners and in the Trust Center. The privacy notices cover visits to AUVY websites, which run no analytics, and Trust Center access requests (§ 4.9). Earlier pre-release drafts are archived; copies on request from legal@auvy.ai.

    • Subprocessor registerv1.0
    • All legal documents1.0

Current versions

DocumentVersionUpdated
Data processing agreement (AVV)1.028 Sept 2026
Data processing overview1.028 Sept 2026
Privacy notice1.028 Sept 2026
Privacy notice for applicants1.02 Nov 2026
Cookies1.028 Sept 2026
Terms for business customers1.122 Oct 2026
Terms for consumers1.122 Oct 2026
Acceptable use policy1.028 Sept 2026
AI notice1.031 Oct 2026
Refund policy1.028 Sept 2026
Withdrawal notice1.028 Sept 2026
Vulnerability disclosure policy1.028 Sept 2026
Imprint (Impressum)1.028 Sept 2026
Subprocessor register1.028 Sept 2026

How the documents relate

AVV vs DPA overview
The German AVV is the binding processor contract under Art. 28 GDPR. The overview pages summarize it; if they differ, the AVV applies.
German AVV vs English DPA translation
The German text is binding. The English translation has the same version number and adds no obligations.
Live register vs AVV Anlage 3 snapshot
The subprocessor page is the live register. AVV Annex 3 is a dated copy of it, and the two match.
B2B vs B2C
Business customers sign the business terms, which include the AVV. Consumers have separate terms; AUVY is the controller for their data and the AVV does not apply.
Product Privacy Notice vs Datenschutzhinweise
The English Product Privacy Notice and the German Datenschutzhinweise are the same notice in two languages, with matching version numbers.
OpenPulse
OpenPulse, the realtime layer, is run by AUVY itself in Helsinki, so it is not listed as a subprocessor.
Marketing Impressum vs Trust imprint
The imprint on www.auvy.ai/legal covers the website. The Trust Center imprint has the same company details and links to these documents.