Trust needs specifics.
Customer workspaces run on servers in Germany, AI runs in the EU. The public demo uses fictional data. This is what is in place today.
In place today
- All traffic uses TLS. Data at rest lies on an encrypted volume (LUKS2, AES-XTS, 512-bit key); credentials of connected channels and shops are additionally encrypted (AES-256-GCM).
- Encrypted backups every night to a separate Hetzner storage in Germany, kept 30 days; the decryption key is not stored on the server. Restores are tested.
- An access log records who opened, downloaded or deleted a customer's data; workspace owners see it in the dashboard. Kept 12 months.
- Conversations are deleted automatically after the retention period you set (default 12 months); single customers can be erased with all their data at any time.
- Answers written by AI are labelled for your customers (EU AI Act, Art. 50). Your team can take over any conversation.
- Passwords are stored as argon2 hashes; server access is limited to two people with SSH keys. The public demo runs on fictional data, with no third-party analytics.
Processing chain
The full list with addresses is in the subprocessor list. Subprocessor list
| Purpose | Provider | Stored in | Processed in | Transfer to third countries |
|---|---|---|---|---|
| Application, database, files | Hetzner Online GmbH | Germany | Germany | no |
| Encrypted backups | Hetzner Online GmbH (Storage Box) | Germany | Germany | no |
| AI replies, voice and image recognition | Mistral AI SAS | not stored | EU | no |
| Our own email | IONOS SE | Germany | Germany | no |
| Payments | Stripe Payments Europe, Ltd. | EU | EU | possible, Data Privacy Framework / SCC |
Contracts and measures
Security incidents: we notify affected customers without undue delay, where possible within 48 hours, under a written incident response policy. Report a security issue to info@halvista.com with the subject "Security".
Ask a questionLegal entity and address
A & D Media und Data GbR
Hedwig-Porschütz-Straße 30, 10557 Berlin, Deutschland
USt-IdNr. DE460408636
Represented by the partners Anastasiia Pylypenko und Denys Drobotov
No certification badges are claimed.
Status checked 26 October 2026