Where is my data stored?

Primary location: EU

All AICT user data is stored in Hetzner data centers in Helsinki, Finland. EU-based, GDPR-native jurisdiction.

What this covers

• User profiles, settings, preferences.
• Saved outputs and brand voice profiles.
• Workflow definitions.
• Billing + invoice history (Stripe also stores in EU for EU customers).
• Aggregated analytics (anonymized).

Backups

• Encrypted at rest (AES-256) and in transit (TLS 1.3).
• 30-day retention.
• Same EU region (Helsinki + Falkenstein replica).

Cross-border transfers (transparent disclosure)

When you use a premium model, the API call goes to:

We attach Standard Contractual Clauses (SCCs) per GDPR Art. 46 with all US-based providers. Your inputs are stripped of identifiers before transmission and never stored by them.

Opting out of US providers

In /account/privacy/ you can toggle "EU-only models". We then route only to:

• Hetzner Ollama (Helsinki)
• Cloudflare Workers AI EU edges
• Mistral (France)

This disables some premium models. The trade-off: stricter data residency, slightly fewer model options.

Audit log

All data accesses by AICT staff are logged. We never read your saved outputs except in a documented support case where you've explicitly granted access via /account/support-access/.