GDPR Compliance

Evident is built with European data protection standards in mind. Your data is encrypted and handled with care.

We process personal data in line with the EU GDPR and UK GDPR. Below is a plain-language overview of where data lives, how we secure it, and the rights you can exercise.

Where Your Data Lives

Infrastructure: European Union

Application data is stored in Neon Postgres (eu-central-1). The app is hosted on Vercel (fra1). See our subprocessors page for the full list.

Processors outside the EU

Some processors (Nango, OpenRouter, Resend, Sentry, Stripe, and Sanity) may process data outside the EU. Customer-connected sources such as HubSpot are not Evident subprocessors.

Data Security

Encryption in Transit

Data transmitted to and from Evident is encrypted using TLS. API calls, webhooks, and user interactions are secured in transit.

Encryption at Rest

Sensitive data, including customer information and conversation context, is encrypted at rest by our infrastructure providers using industry-standard encryption.

Your GDPR Rights

Right to access: Request a copy of your personal data we hold
Right to rectification: Correct inaccurate or incomplete data
Right to erasure: Request deletion of your personal data
Right to data portability: Export your data in a machine-readable format
Right to restrict processing: Limit how we use your personal data
Right to object: Object to processing of your personal data
Rights related to automated decision-making: Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects

Questions about GDPR?

If you have questions about how we handle your data or want to exercise your GDPR rights, contact us at thom@evident.pm.