What your IT department gets today.
- Data residency
- Frankfurt, EU
- Sub-processor list
- published
- Training on your data
- never
- SOC 2 / ISO 27001
- neither, not yet
Technical and organisational measures, retention per data class and the deletion route are on 1 page, written to be forwarded without a call. We do not have an audit report and do not imply one.
Customer-funded, no investors. 1 person answers, within 1 working day.
The application and database run on Render in Frankfurt (EU), and Render keeps a continuous backup of the database for point-in-time recovery. Once a week the whole database is also dumped to Cloudflare R2 in the EU, and each dump is kept 8 weeks. Once a quarter the newest dump is restored into a separate database and checked: its checksum, its migrations and its row counts. Data is encrypted in transit (TLS 1.2 or higher) and at rest. Access to production is limited to the founder, with hardware keys, and every access is logged. Our hosting provider holds ISO 27001 and SOC 2; AnswerGeo itself is not yet certified, and the plan for that is stated below. Report a vulnerability through /.well-known/security.txt; we acknowledge within 2 working days.
Hosting and region
Data flows per engine
Measurement: only the query text goes to each engine, as written and in the market's language, together with the market's country: it is set as the engine's location parameter or code where the engine has one, and it is named in the instruction each model is given (Gemini has no location parameter, so only there); the answer comes back and is stored in Frankfurt. Query generation: your domain and business description go to a model provider, named on the subprocessor page. Sentiment: the sentence in which your brand appears goes to a model provider, named on the same page. Neither provider is chosen yet. One thing more leaves it: the e-mail we send you, with your address, through the provider on the subprocessor page. No payment data and no competitor list leaves Frankfurt.
Encryption
Backups and restore tests
Access control
Subprocessors
Certifications
Our hosting provider holds ISO 27001 and SOC 2; AnswerGeo itself is not yet certified. No date is set for a SOC 2 Type 1 readiness assessment; this line changes when one is.