Data handling
Where customer data lives, who can access it, how it is encrypted, and how long it is kept.
Last updated: 2026-09-26
Where is data stored?
All customer data is stored in Helsinki. AI, voice and web search requests are processed in the EU regions below.
- Workspace content
- Helsinki: documents, files and product data
- Accounts & access
- Helsinki: sign-in, sessions and membership
- Web application
- Helsinki: the AUVY app, run by AUVY
- AI features
- Amazon Bedrock (Frankfurt, Stockholm, Ireland, Paris, Milan, Spain) and Microsoft Azure (Frankfurt, Sweden)
- Voice
- Microsoft Azure speech recognition in Sweden
- Web search
- Linkup, EU
- Realtime collaboration
- Helsinki: OpenPulse, run by AUVY
- Meetings
- Helsinki: OpenPulse media servers. Recordings are stored there when a meeting is recorded
Who has access?
People in your workspace, and AUVY staff when they need access to run the service.
- Your team
- Access follows workspace roles for signed-in users
- Workspace owners
- Can export or delete workspace data; those actions are logged
- AUVY staff
- Limited production access for support and operations
- Professional secrecy (§ 203)
- Available to Enterprise customers after written activation under the AVV
Security-relevant actions, exports, and deletions are recorded in your workspace activity log (typically kept about 12 months).
How is data encrypted?
Data is encrypted in transit, and backups are encrypted.
- In transit
- TLS 1.2 or higher for connections to AUVY and our providers
- Backups
- AES-256-GCM encryption, kept for 30 days in Helsinki
- Sensitive fields
- Extra protection for document contents and connected-account secrets
The full list of technical measures is in the AVV, Annex 2.
Retention and deletion
You can export at any time. How long each kind of data is kept:
- Account data
- Kept while the account exists. An erasure request removes or anonymizes it unless the law requires keeping it
- Workspace content
- Deleted when an owner deletes the workspace, or within 30 days after the contract ends. Deleting one person’s account does not delete a shared workspace
- Activity logs
- About 12 months
- Product analytics
- Up to 90 days in identifiable form, then aggregated or anonymized
- Invoices & accounting vouchers
- Generally 8 years under German commercial and tax law
- Books & annual accounts
- 10 years for books and annual accounts, 6 years for business correspondence
- AI processing
- Processed per request under the provider contracts, never used for model training
A legal hold, such as a tax audit or a lawsuit, can extend these periods. Records kept for that reason are not used for anything else.