Skip to content
Join the waitlistJoin →
DATA RESIDENCY · THE FULL LISTNAMED, NOT BADGEDFOR AGENCIES

Where your data actually lives.

Not an “EU-hosted” badge. The legal entity, its jurisdiction, and exactly what it receives — for every processor we use, including the ones that aren’t in the EU.

THE SHORT ANSWER

10 PROCESSORS · 3 OUTSIDE THE EU
01
The product runs on our own hardware in Germany.
App, PostgreSQL, files, generated reports and every background job — one provider, one country
no AWS · no Google Cloud · no Azure
02
Credentials are encrypted at rest.
OAuth tokens and API keys sealed with AES-256-GCM, decryptable only by the app — and deleted when you disconnect an integration
we store metrics, not raw API responses
03
Three processors sit outside the EU. Here they are.
Google · Firehose (Ahrefs) · Userback — each under Standard Contractual Clauses
a list you can check beats a badge

THE REGISTER

Every processor. Named.

SAME LIST AS THE PRIVACY POLICY
ProcessorWhat it receivesJurisdiction
Contabo (EU VPS)Hosting: app, database, files, background jobsEU
EU (Germany)
BrevoTransactional & waitlist emailEU
EU
GoogleAnalytics & Search Console data you connectNON-EU · SCCs
Customer-authorized API (Google infrastructure, under SCCs)
PostHogProduct analytics you connectEU
EU Cloud (or your own region)
EUrouterAI/LLM processing for report commentaryEU
EU
Mistral AIAI report commentary, where selected as the modelEU
EU (France)
DataForSEODataForSEO OÜSearch rankings, backlinks and AI-visibility checks for the domains, keywords and brand names you trackEU
DataForSEO OÜ — EU (Estonia); parts of its own infrastructure sit outside the EU, under SCCs
Firehose (Ahrefs)Ahrefs Pte. Ltd.Web-mention monitoring for the brand names you trackNON-EU · SCCs
Ahrefs Pte. Ltd. — Singapore, under SCCs
UserbackUserback Pty LtdIn-app feedback widget (signed-in app) — screenshot and account identityNON-EU · SCCs
Userback Pty Ltd, Australia · hosted on AWS in the US — under SCCs
UsermavenSelf-hosted analytics (web cookieless · in-app cookie)EU
EU

Where a processor sits outside the EU, transfers rely on Standard Contractual Clauses or an equivalent safeguard. We notify customers of material changes to this list. Full detail in the privacy policy.

THE DISTINCTION THAT MATTERS

Not every processor holds personal data.

4 OF 10 GET BUSINESS IDENTIFIERS ONLY
01

Business identifiers

Domains, keywords and brand names you choose to track. That is all the SEO and AI-visibility providers ever receive — EUrouter, Mistral AI, DataForSEO, Firehose (Ahrefs). No account records, no client contacts, no end-user data.

02

Personal data

Names, email addresses, sign-in events. Held by hosting, email, analytics and the feedback widget — the four places where it genuinely has to go, and nowhere else.

03

Your clients’ metrics

Normalised snapshots on our own database in Germany. We do not keep raw API responses, and connected-source credentials are encrypted at rest and deleted on disconnect.

04

What we don’t do

No ad-tech pixels. No data brokers. Public-site analytics run cookieless with truncated IPs, and the in-app feedback widget loads only after you explicitly accept it.

FAQ

THE PROCUREMENT QUESTIONS
01

Where is client data stored?

The app, PostgreSQL, uploaded files, generated reports and every background job run on our own servers in Germany. No US hyperscaler holds your accounts, metrics or reports.
02

Is DataForSEO an EU company?

Yes — it contracts as DataForSEO OÜ, company number 14502291, registered in Tallinn, Estonia. Its Kharkiv office is not the contracting entity. Parts of its own infrastructure sit outside the EU, under SCCs.
03

Do the AI models see personal data?

Prompts carry metric summaries, not personal records. Commentary is generated through EUrouter inside the EU, and Mistral in France can be selected directly — the model is switchable per organisation.

PRIVATE BETA

Answer the data question before the client asks it.

We’re onboarding agencies in small batches. Leave your email and we’ll reach out as spots open — no credit card, no sales call.

Double opt-in · no spam · unsubscribe anytime · EU-hosted

We use privacy-friendly, first-party analytics — cookieless on our public site. Decline to opt out; Accept also enables our in-app feedback tool. Essential cookies (sign-in, preferences) are always on. See our Privacy Policy.