The short answer
Hosting and storage take place within the EU. Where we do use an American service — signing in with your Google or Microsoft account, Anthropic's AI inside our tools, and the models SitePulse queries — it is simply named below. With every AI colleague that carries out actions on its own, you keep final control: when in doubt, the AI escalates to a person.
Who processes what
| Service | What for | Where | What goes through it |
|---|---|---|---|
| Railway | Hosting and database for our applications | Frankfurt, Germany | Account details, your content |
| Mistral | The AI model behind Vera | France | Email content of appointment requests |
| Anthropic | AI processing in our tools | United States | Text you give the tool |
| Signing in with your Google account, and your calendar if you connect it | United States | Name, email address, calendar entries | |
| Microsoft | Signing in with your Microsoft account, and your Outlook calendar | United States | Name, email address, calendar entries |
| Brevo | Sending notification emails | France | Your email address and the content of the notification |
| Google Analytics | Visitor statistics for this website | Google Ireland, EU | IP address, anonymised. Only with your consent |
| Microsoft Clarity | Heatmaps and session recordings for this website | United States | Mouse movements, clicks and scrolling, with an anonymised IP address. Only with your consent |
| RDW and market data sources | Vehicle data for CarWatch | EU | Registration number, vehicle characteristics |
| Claude, ChatGPT, Gemini, Perplexity | SitePulse asks them live whether they mention your brand | United States | Only your website address and the search query |
What that means, plainly
Your content is in Europe. The database and the files run in Frankfurt. Vera's AI comes from France. What you enter is stored here.
The AI processing inside our tools runs on Anthropic, in the United States. The text you give a tool travels there to be processed; it is stored in Frankfurt. That transfer is covered contractually by Standard Contractual Clauses.
Signing in goes through Google or Microsoft. Those are American companies. We never see your password, but the sign-in request does pass through them. If you would rather it did not, you can have an account with an email address instead.
SitePulse asks American AI models about your brand. That is exactly what the product does: measure whether ChatGPT mentions you. Your website address and a search query go to those models, nothing more.
You keep final control
Every AI colleague that acts on its own does so within limits you set. In the first weeks a person approves every decision. Only once the accuracy is high enough does it run automatically, and even then the AI escalates to you when in doubt.
What we do not do
We do not train models on your data. We do not sell anything on. We do not ask for data we do not need. And we keep nothing longer than necessary: calendar data ninety days at most, technical logs ninety days at most, vehicle analyses six months. The full list is in the privacy statement.
Reporting a vulnerability
Found something? Email security@ai-werkers.nl. The details are in our security.txt.