Trust Center
This page names every company that runs part of Savyy and where each one keeps your data.
Last updated: August 22, 2026
Where your data lives
Your financial data is stored in the European Union. Here is exactly where.
Database
Frankfurt, Germany
Managed Postgres running on AWS in the eu-central-1 region, with automated encrypted backups and point-in-time recovery.
Application servers
Nuremberg, Germany
The Savyy API runs in Hetzner's ISO 27001 certified data center park in Nuremberg.
Object storage
European Union
Buckets are locked to the EU jurisdiction, so stored files never leave it.
Web hosting
Global edge network
The web app is delivered from Vercel's edge network. Your financial data is stored in the EU systems above.
Who processes your data
The full list. If a company touches your data, it is in this table.
| Provider | Role | Location |
|---|---|---|
| Bridge | Bank connections through PSD2 open banking, regulated by the ACPR | France |
| PlanetScale | Managed database for your accounts and transactions | Frankfurt, Germany (AWS eu-central-1) |
| Hetzner | Application servers running the Savyy API | Nuremberg, Germany |
| Cloudflare | Object storage and edge delivery | European Union |
| Vercel | Web app hosting and AI request routing | Global edge network |
| Stripe | Subscription payments on the web | EU and United States |
| RevenueCat | Subscription management on mobile | United States |
| Anthropic | AI models for the features you enable | United States |
| OpenAI | AI models for the features you enable | United States |
| PostHog | Product analytics | EU Cloud (Frankfurt) |
| Sentry | Error monitoring | European Union |
| Amazon SES | Transactional email | Paris, France (eu-west-3) |
| Expo | Push notification delivery on mobile | United States |
| Twelve Data | Market prices for stocks, currencies, and crypto | No personal data received |
Providers outside the EU process data under GDPR safeguards, including Standard Contractual Clauses.
Anthropic and OpenAI receive data only after you enable AI features, with zero data retention enforced on every request.
AI with zero data retention
AI features are off by default. When you enable them, every request carries a flag that forbids the provider from keeping it.
Savyy routes every AI request through Vercel AI Gateway with zero data retention switched on. The gateway only routes to providers with verified zero-data-retention agreements; if none is available for a model, the request fails instead of falling back to a provider that stores data. Prompts and answers are deleted as soon as the request completes.
- Zero-data-retention routing enforced on every request
- Explicit opt-in consent, checked server-side before any data leaves our systems
- No model training on your data, by us or by our providers
- Your name, email, and banking credentials are never sent to AI providers
Compliance
The rules Savyy and its providers operate under.
GDPR
You can access, export, correct, and delete your data at any time. Account deletion permanently removes your personal data from our systems within 30 days.
PSD2 Open Banking
Bank connections run through Bridge, a French provider regulated by the ACPR and PSD2-certified since 2018. Access is read-only: Savyy can never move your money.
Provider Certifications
Our providers maintain their own audits and certifications, such as Hetzner's ISO 27001 certified data centers and PlanetScale's SOC 2 Type 2 attestation.
Questions about our infrastructure?
We answer them ourselves.
If anything on this page is unclear, or you want details about a specific provider before trusting Savyy with your accounts, write to us. We respond within 24 hours.
Contact us
