Your data stays in Europe.

Hosted in the EU

All customer data is processed and stored on servers in the European Union. No customer content leaves the EU except limited residual transfers covered by EU Standard Contractual Clauses (see the privacy policy).

Read-only email access

The vanadio Outlook add-in reads mailbox data through Microsoft APIs with permissions granted by your administrator in Microsoft Entra ID. Access is read-only, and we never modify or delete your mail. Messages classified as relevant, such as RFQs, are stored and processed in our EU infrastructure; other messages are not retained.

EU-based AI processing

Classification and extraction use OpenAI's large-language-model API, called with EU data residency so your content is processed in the European Union. Inputs and outputs are not stored at rest and are not used to train models.

Never trains a shared model

Your data improves your results only. It is never used to train or improve models made available to other customers.

Take it with you

Your data and the learnings built on it are yours. You can export them at any time, and there is no lock-in.

Strict tenant separation

Standard customers are logically separated within a shared database; enterprise customers can request a dedicated database. Data from different customers is never mixed.

Encryption

Data is encrypted in transit and at rest using current industry standards.

Data deletion

Data is deleted on request and at offboarding. Retention periods are defined per data category. On termination of the agreement, customer data is returned or deleted in line with the DPA.

Data processing agreement

We process customer data only on documented instructions under an Art. 28 GDPR agreement. See the DPA page for the key commitments and download.

Certifications

ISO 27001 certification is in progress.