This page explains where your data is stored and processed, how it is protected, and our commitments on backups, access, and AI training.
1. Where Your Data Is Hosted
engage insights runs on enterprise cloud infrastructure operated by Amazon Web Services (AWS) and Supabase. Data is hosted in one of two regions:
| Region | Location | Primary use |
|---|---|---|
| European Union | Frankfurt, Germany (eu-central) | EU/EEA customers and GDPR-scoped data |
| United States | AWS US regions | US customers and global operations |
Our primary managed database and authentication services are hosted in the EU (Frankfurt) region.
2. Choice of Region
Where applicable, customers can choose the region in which their data is stored to meet data-residency and regulatory requirements. If you have a specific residency need, contact us before onboarding so we can configure your environment accordingly.
3. Encryption
All data is encrypted in transit using TLS 1.2 or higher, and encrypted at rest using AES-256. Encryption keys are managed by our cloud providers’ key-management services with strict access controls.
4. Access Controls
- Role-based access controls limit data access to authorised personnel on a need-to-know basis
- Multi-factor authentication is enforced for administrative access
- Access is logged and monitored, and reviewed periodically
- Row-level security isolates each customer’s data within the platform
5. Backups & Resilience
We maintain automated, encrypted backups to support recovery in the event of an incident. Backups are retained for a defined period and stored within the same region as the primary data. Our infrastructure providers offer high-availability architectures to minimise downtime.
6. No Customer Data Used to Train AI Models
We do not use customer data to train AI models. Any AI-assisted features operate on your data only to produce results for you, within your environment, and your content is never used to train or improve shared or third-party models.
7. Sub-processors
We rely on a small number of infrastructure sub-processors, principally AWS (cloud hosting) and Supabase (managed database and authentication). A current list is available on request and in our Data Processing Agreement.
8. GDPR & CCPA Readiness
Our hosting and data-handling practices are designed to support compliance with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA). International transfers are governed by Standard Contractual Clauses where required. For details of how we handle personal data and your rights, see our Privacy Policy and Data Processing Agreement.
Questions? Contact amine@engageinsights.io.
engage insights is a brand of Azla Managers LLC, a Florida limited liability company.