Frequently asked questions
Short answers about hosting, compliance, AI and who to contact.
How is customer data isolated?
Each workspace belongs to one organisation. Only signed-in members with the right role can access it. Exports and deletions are logged.
Where is my data stored?
All customer data is stored in Helsinki. AI, voice and web search requests are processed in EU regions.
Who can access my data?
The people in your workspace, according to their roles. AUVY staff have limited access for support and operations. Owners can export or delete data, and both actions are logged.
How is data encrypted?
Connections use TLS 1.2 or higher. Backups are encrypted with AES-256-GCM. Documents and connected-account secrets get additional protection.
What are your retention periods?
You can export workspace content at any time. It is deleted within 30 days after the contract ends, and backups rotate out 30 days later. Activity logs are kept for about 12 months, billing records for as long as tax law requires.
What GDPR documentation does AUVY provide?
The processor agreement (AVV, binding in German, with an English translation), the privacy notices, the technical measures and the subprocessor register are all public. Privacy requests go to privacy@auvy.ai.
Can I use AUVY for data under § 203 StGB?
Only on Enterprise, and only after the § 203 clause in the AVV has been activated in writing. Until then, do not put data covered by German professional secrecy into AUVY.
What certifications does AUVY have?
None yet. SOC 2 Type II and ISO 27001 are planned, and no auditor is engaged yet.
Why does connecting Microsoft 365 need an admin, but Sign in with Microsoft does not?
Sign in with Microsoft only asks who you are. Connecting Outlook, Teams or SharePoint reads mail, chats and files, so Microsoft asks a company admin to approve it once. After that, each person connects their own account, and AUVY acts only as that person.
How does AUVY use AI with my data?
For each request, AUVY sends the model provider what that request needs and saves the answer in your workspace. Your data is not used to train models.
How is voice transcription handled?
Voice features use Microsoft Azure speech recognition in Sweden.
How is web search handled?
Web search and page retrieval go through Linkup in the EU. Only the query and the requested URLs are sent.
Which terms apply to me, business or consumer?
If you buy AUVY for a business, the business terms apply. If you buy it for yourself, the consumer terms apply. Both are under Documents.
Who do I contact?
Security: security@auvy.ai. Privacy: privacy@auvy.ai. Support: support@auvy.ai.