AUVYTrust Center

AUVYTrust Center

Trust you can review

EU-hosted workspaces, public processor disclosures, and the contracts buyers need — written for security, legal, and procurement review.

  • Core EU hosting
  • Public AVV / DPA
  • Processor register
  • AI transparency
security@auvy.aiPrivacy PolicyAVVChangelogHow AI works

Subprocessors

Companies selected by AUVY that process data on our behalf. Regions, optional paths, and available contract or privacy sources are listed per processor.

List 3.1 · Last updated 10 August 2026

Core EU hostingDefault EU searchProcessor registerSeparate workspaces

Core workspace content and accounts run on AUVY-operated infrastructure in Helsinki. Standard AI and voice paths use EU-region cloud providers, and Linkup provides the default EU web-search path. OpenPulse is an AUVY-operated service on internal EU infrastructure, not a separately verified contracting subprocessor. Workspaces stay isolated by organisation.

Current subprocessors

SubprocessorWhat they doData involvedWhereOptional
Hetzner Online GmbHDPA / policyPrimary EU hosting for the product and customer workspacesAccount and login data, workspace content and files, operational service dataEU (Helsinki)No
Amazon Web Services EMEA SARLDPA / policyEU cloud infrastructure and AI model accessWorkspace content, prompts, uploaded files, service logsEU (Frankfurt)No
Microsoft Ireland Operations Ltd.DPA / policyEU AI model services (where configured) and voice transcriptionWorkspace content, prompts, attached files, audio and transcripts for voice features, service logsEU (Frankfurt, Sweden)No
Linkup SASDPA / policyWeb search and fetching public page content when you use those featuresSearch queries, requested URLs, returned public web results and page textEU (Azure EU)No
Vercel Inc.DPA / policyHosting and delivery of the AUVY web applicationRequest metadata and delivery telemetryEU (Frankfurt); edge delivery may process request metadata globallyNo
Stripe Payments Europe, Ltd.DPA / policySubscription billing, invoices, and payment methodsEmail, billing name and address, payment method (held by Stripe), subscription and invoice detailsEU (Ireland)No
Resend Inc.DPA / policyTransactional email (account, billing, and system messages)Recipient email, message content, delivery metadataEU send (Ireland); account metadata in US (GDPR DPA, SCCs, DPF)No
PostHog Inc.DPA / policyProduct analytics and feature flags when enabledPseudonymous user ID, feature usage events, workspace metadataEU (Frankfurt)Yes

This list covers AUVY-selected processors that are active or production-capable. “Optional” means the provider receives data only when the relevant feature or configured path is enabled and invoked; it does not mean every workspace uses that provider. OpenPulse is an AUVY-operated service on internal EU infrastructure and is therefore described here but not listed as a third-party subprocessor. Customer-selected integrations and destinations remain separate recipients under the customer’s control. Inactive optional model credentials are not represented as active subprocessors. For German professional secrecy (§ 203 StGB), AUVY may further limit available providers and features for the workspace.