Compliance
What we have published, and what is still planned. Nothing here is a certificate.
Where we stand
- Published
GDPR documentation
The processor agreement, the subprocessor register and the privacy notice are public. Privacy questions go to privacy@auvy.ai.
- Active
Hosted in the EU
Customer data is stored with Hetzner in Helsinki. AI, voice and web search requests are processed in EU regions.
- On request
§ 203 StGB
Enterprise customers bound by German professional secrecy can activate the § 203 clause of the AVV in writing. Until then, such data must not go into AUVY.
- Planned
SOC 2 Type II
Planned. No auditor is engaged yet, so there is no report.
- Planned
ISO 27001
Not certified. The technical measures we run are listed in the AVV, Annex 2.