GDPR Compliance

Evident is built with European data protection standards in mind. Your data is encrypted and handled with care.

We process personal data in line with the EU GDPR and UK GDPR. Below is a plain-language overview of where data lives, how we secure it, and the rights you can exercise.

Where Your Data Lives

Infrastructure — European Union

Our primary application data is stored with Supabase in the EU. Frontend hosting runs on Vercel, with Cloudflare providing CDN and security services configured for EU delivery where available.

Analytics — European Union

Product analytics are handled by PostHog (EU) and website analytics by Databuddy. See our subprocessors page for the full list.

Data Security

Encryption in Transit

Data transmitted to and from Evident is encrypted using TLS. API calls, webhooks, and user interactions are secured in transit.

Encryption at Rest

Sensitive data, including customer information and conversation context, is encrypted at rest by our infrastructure providers using industry-standard encryption.

Your GDPR Rights

Right to access — Request a copy of your personal data we hold
Right to rectification — Correct inaccurate or incomplete data
Right to erasure — Request deletion of your personal data
Right to data portability — Export your data in a machine-readable format
Right to restrict processing — Limit how we use your personal data
Right to object — Object to processing of your personal data
Rights related to automated decision-making — Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects

Questions about GDPR?

If you have questions about how we handle your data or want to exercise your GDPR rights, contact us at thom@evident.pm.