Data handling

Where customer data lives, who can access it, how it is encrypted, and how long it is kept.

Where is data stored?

All customer data is stored in Helsinki. AI, voice and web search requests are processed in the EU regions below.

Workspace content: Helsinki: documents, files and product data
Accounts & access: Helsinki: sign-in, sessions and membership
Web application: Helsinki: the AUVY app, run by AUVY
AI models and compute: Amazon Bedrock (Frankfurt, Stockholm, Ireland, Paris, Milan, Spain), Microsoft Azure (Frankfurt, Sweden) and Google Vertex AI (Netherlands)
Voice: Microsoft Azure speech recognition in Sweden
Web search: Linkup, EU
Realtime collaboration: Helsinki: OpenPulse, run by AUVY
Meetings: Helsinki: OpenPulse media servers. Recordings are stored there when a meeting is recorded

People in your workspace, and AUVY staff when they need access to run the service.

Your team: Access follows workspace roles for signed-in users
Workspace owners: Can export or delete workspace data; those actions are logged
AUVY staff: Limited production access for support and operations
Professional secrecy (§ 203): Available to Business and Enterprise customers after written activation under the AVV

Security-relevant actions, exports and deletions are recorded in your workspace activity log, kept about 12 months.

In transit, at rest for documents and secrets, and in every backup.

In transit: TLS 1.2 or 1.3 for connections to AUVY and to our providers; older versions are refused
Document contents: AES-256-GCM, with a separate key for each workspace
Connected accounts: Access tokens and secrets are encrypted before they are stored
Backups: AES-256 authenticated encryption before they leave the server, kept for 30 days in Helsinki
Planned: Disk encryption on every server, a key service with escrow, workspace deletion that destroys its keys, and customer-managed keys for Enterprise

The full list of technical measures is in the AVV, Annex 2.

You can export at any time. How long each kind of data is kept:

Account data: Kept while the account exists. An erasure request removes or anonymizes it unless the law requires keeping it
Workspace content: Deleted when an owner deletes the workspace, or within 30 days after the contract ends. Deleting one person’s account does not delete a shared workspace
Activity logs: About 12 months
Product analytics: Up to 90 days in identifiable form, then aggregated or anonymized
Invoices & accounting vouchers: Generally 8 years under German commercial and tax law
Books & annual accounts: 10 years for books and annual accounts, 6 years for business correspondence
AI processing: Processed per request under the provider contracts, never used for model training

A legal hold, such as a tax audit or a lawsuit, can extend these periods. Records kept for that reason are not used for anything else.