---
title: "Trust Center | Savyy"
description: "Where Savyy stores your data and who processes it: EU data residency, every provider named, zero-data-retention AI, and GDPR commitments."
url: "https://savyy.net/trust"
locale: "en"
last_updated: "2026-08-22"
---

# Trust Center

This page names every company that runs part of Savyy and where each one keeps your data.

## Where your data lives

Your financial data is stored in the European Union. Here is exactly where.

- Database

- PlanetScale

- Frankfurt, Germany

- Managed Postgres running on AWS in the eu-central-1 region, with automated encrypted backups and point-in-time recovery.

- Application servers

- Hetzner

- Nuremberg, Germany

- The Savyy API runs in Hetzner's ISO 27001 certified data center park in Nuremberg.

- Object storage

- Cloudflare R2

- European Union

- Buckets are locked to the EU jurisdiction, so stored files never leave it.

- Web hosting

- Vercel

- Global edge network

- The web app is delivered from Vercel's edge network. Your financial data is stored in the EU systems above.

## Who processes your data

The full list. If a company touches your data, it is in this table.

- Provider

- Role

- Location

- Bridge

- Bank connections through PSD2 open banking, regulated by the ACPR

- France

- PlanetScale

- Managed database for your accounts and transactions

- Frankfurt, Germany (AWS eu-central-1)

- Hetzner

- Application servers running the Savyy API

- Nuremberg, Germany

- Cloudflare

- Object storage and edge delivery

- European Union

- Vercel

- Web app hosting and AI request routing

- Global edge network

- Stripe

- Subscription payments on the web

- EU and United States

- RevenueCat

- Subscription management on mobile

- United States

- Anthropic

- AI models for the features you enable

- United States

- OpenAI

- AI models for the features you enable

- United States

- PostHog

- Product analytics

- EU Cloud (Frankfurt)

- Sentry

- Error monitoring

- European Union

- Amazon SES

- Transactional email

- Paris, France (eu-west-3)

- Expo

- Push notification delivery on mobile

- United States

- Twelve Data

- Market prices for stocks, currencies, and crypto

- No personal data received

- Providers outside the EU process data under GDPR safeguards, including Standard Contractual Clauses.

- Anthropic and OpenAI receive data only after you enable AI features, with zero data retention enforced on every request.

## AI with zero data retention

AI features are off by default. When you enable them, every request carries a flag that forbids the provider from keeping it.

- Savyy routes every AI request through Vercel AI Gateway with zero data retention switched on. The gateway only routes to providers with verified zero-data-retention agreements; if none is available for a model, the request fails instead of falling back to a provider that stores data. Prompts and answers are deleted as soon as the request completes.

- Zero-data-retention routing enforced on every request

- Explicit opt-in consent, checked server-side before any data leaves our systems

- No model training on your data, by us or by our providers

- Your name, email, and banking credentials are never sent to AI providers

## Compliance

The rules Savyy and its providers operate under.

- GDPR

- You can access, export, correct, and delete your data at any time. Account deletion permanently removes your personal data from our systems within 30 days.

- PSD2 Open Banking

- Bank connections run through Bridge, a French provider regulated by the ACPR and PSD2-certified since 2018. Access is read-only: Savyy can never move your money.

- Provider Certifications

- Our providers maintain their own audits and certifications, such as Hetzner's ISO 27001 certified data centers and PlanetScale's SOC 2 Type 2 attestation.

## Questions about our infrastructure?

We answer them ourselves.

- Talk to us

- If anything on this page is unclear, or you want details about a specific provider before trusting Savyy with your accounts, write to us. We respond within 24 hours.

- Contact us