How HappySupport protects your data
Understand where HappySupport hosts your data, how encryption and tenant isolation protect it, and which services process data outside the EU.
HappySupport keeps your service data in the EU and applies encryption, tenant isolation, and contractual safeguards to protect it. This article covers where your data lives, how AI processing works, and the few cases where data leaves the EU.
What it's for
If you're evaluating HappySupport for your team or preparing for a compliance review, this is where you'll find the key data-protection facts: hosting locations, encryption, AI processing, transfer exceptions, and what happens to your data when you leave.
Hosting and data residency
Your core service data (the application, database, and file storage) is hosted in Germany. AI processing stays in the EU as well, split between Germany and Sweden. Here's the full picture:
| Provider | Service | Location |
|---|---|---|
| Netcup | Application hosting | Nuremberg, Germany |
| AWS | File storage (S3) | Frankfurt, Germany (eu-central-1) |
| Neon | Database (PostgreSQL) | Frankfurt, Germany |
| Microsoft Azure OpenAI | AI search, answers, article work, translations, repository analysis, embeddings | Sweden (EU) |
| Amazon Bedrock (Anthropic Claude) | Article generation and editing | EU, ZDR |
| Browserbase | Browser automation | Frankfurt, Germany |
| Langfuse | AI observability and logging | Ireland (AWS eu-west-1) |
| Resend | Transactional email | Ireland |
| Stripe | Payment processing | EU and global (PCI-DSS Level 1) |
Repository data, Help Center content, search queries, and AI answers are processed in the EU. A few functions are exceptions, described in the next section.
Processing outside the EU
Some parts of the service involve providers that process data outside the EU:
- Voice transcription (OpenAI, US): If you use the optional voice dictation feature during article recording, audio is sent to OpenAI in the United States for transcription. OpenAI may retain that data for up to 30 days for abuse monitoring.
- Payments (Stripe): Payment processing runs through Stripe, which operates in the EU and globally.
Transfer safeguards such as Data Processing Agreements, the EU-US Data Privacy Framework, and European Commission Standard Contractual Clauses (SCCs) apply to these providers. You can request copies of the relevant safeguards by contacting contact@happysupport.ai.
AI processing and logging
AI features run on Microsoft Azure OpenAI in Sweden and Amazon Bedrock (using Anthropic Claude models) in the EU. Azure OpenAI may retain data for up to 30 days for abuse monitoring. Amazon Bedrock operates under a zero-data-retention agreement, meaning no provider-side retention.
Langfuse, based in Ireland, logs AI inputs and outputs for error analysis. Those logs are deleted after 30 days. Search queries and AI answers aren't stored in HappySupport's own database.
HappySupport doesn't use your content to train, fine-tune, evaluate, or benchmark AI models. This is contractually confirmed with OpenAI, Anthropic, and Browserbase, all of which exclude customer content from model training.
Encryption, isolation, and security safeguards
- In transit: All connections use TLS (HTTPS).
- At rest: Server-side encryption on the Neon database and AWS S3 object storage.
- Tenant isolation: Your data is separated from every other organization's at the query layer.
HappySupport signs a Data Processing Agreement (DPA) with you under Art. 28 GDPR. A data protection officer is appointed, and contact details are in the DPA. You have the right to review technical and organizational measures, including information, attestations, and certification evidence. The full subprocessor list is available on request.
The privacy notice is available at https://www.happysupport.ai/privacy. It contains the complete legal disclosures, including processing purposes, legal bases, retention periods, and sub-processor details.
What happens to your data if you cancel
Once there's no active subscription, all data is deleted from the server. At the end of the contract, HappySupport returns the processed data to you or destroys it in line with data-protection rules. A deletion log is available on request. The only exception is data subject to a statutory retention period.
Powered by happysupport.ai