Subprocessors
Companies that process data for AUVY, what they receive, and where.
- Stored
- HetznerHelsinki, EU
- Processed per request
- Amazon Bedrock, Microsoft Azure, Google Vertex AI, Linkup, ResendNone of them stores workspaces
- Named for transparency
- StripeAUVY’s own billing records, no workspace content
Where customer data is stored
Workspaces, files and accounts, in Helsinki. No other provider holds a copy.
| Subprocessor | Data processed | Location | Agreement |
|---|---|---|---|
 Hetzner Online GmbH Hosting and storage of all customer data | All customer data: workspaces, files, accounts | EU (Helsinki) | DPA |
Run by AUVY itself
OpenPulse is part of AUVY GmbH, as is Outeva. Both run on AUVY’s servers in Helsinki and are not third parties.
| Service | Data processed | Location | Agreement |
|---|---|---|---|
 OpenPulse (AUVY GmbH) Live collaboration, meetings and system email (OpenPulse Mail) | Document edits, messages and presence in real time; meeting audio and video; meeting recordings when a meeting is recorded; for system email (sign-in, notices, Trust Center mail): recipient address, email content, delivery status | EU (Helsinki) | Privacy |
Outeva (AUVY GmbH) Sales, marketing and customer success as an app in the workspace | Companies, contacts, appointments, offers and campaigns the customer creates in Outeva; workspace content in the areas Outeva is installed for | EU (Helsinki) | Privacy |
AI models, compute and voice
Each request is processed in EU regions and never used for training. Amazon Bedrock keeps nothing; Microsoft may keep Azure OpenAI prompts and responses for up to 30 days for abuse monitoring; Google may cache inputs in memory for up to 24 hours.
| Subprocessor | Data processed | Location | Agreement |
|---|---|---|---|
 Amazon Web Services EMEA SARL AI models and compute (Amazon Bedrock, EU inference profiles) | Content of each AI request: prompts, workspace content and files sent with it | EU (Frankfurt, Stockholm, Ireland, Paris, Milan, Spain) | DPA |
 Microsoft Ireland Operations Ltd. AI models and compute (Azure OpenAI, Azure AI Foundry) and speech recognition | Content of each AI request; audio and transcripts for voice features | EU (Frankfurt, Sweden) | DPA |
 Google Cloud EMEA Limited AI models and compute (Vertex AI: Gemini models and text embeddings) | Content of each AI request: prompts, workspace content and files sent with it | EU (Netherlands) | DPA |
Web search and email
Only when a search runs, an email goes out or an email arrives for a project address.
| Subprocessor | Data processed | Location | Agreement |
|---|---|---|---|
 Linkup SAS Web search and retrieval of public web pages | Search queries, requested URLs | EU | DPA |
 Resend Inc. Delivery of the system emails AUVY sends through OpenPulse Mail, and receipt of email sent to project addresses | Sender and recipient addresses, email content and attachments, delivery status | EU (Ireland) | DPA |
Billing, named for transparency
AUVY’s own billing records: contact, invoices and payment method. No workspace content.
| Subprocessor | Data processed | Location | Agreement |
|---|---|---|---|
 Stripe Payments Europe, Ltd. Payment processing, mainly AUVY’s own billing data | Customer billing details, payment method | EU (Ireland) | DPA |
All customer data is stored in Helsinki (EU). AI models, compute, voice and web search run in EU regions.
Changes are announced 30 days in advance, with a right to object (AVV § 6). Integrations you activate yourself, such as Microsoft 365, are not AUVY subprocessors.