Haavi

Security

Everything you store stays in the EU and stays yours

Teams use Haavi for draft bids, pricing and references. That is why Haavi is built to keep data in the EU, separate from other customers and out of AI model training.

Everything in the EU

Data, documents and AI processing always stay in the EU. Customer content is never stored outside the EEA.

Separate from other customers

Database row-level security isolates every organization. Isolation is tested automatically on every change.

Never used for AI training

Your data is never used to train models. The AI service does not store prompts or responses.

Data location

Your data stays confidential and in the EU

Your draft bids, pricing and AI conversations stay confidential: other customers never see them, and they are never used to train AI models. They also stay in the EU, stored in Stockholm and processed in the EU regions of the world's leading cloud platforms.

  • Confidential
  • Always in the EU
  • GDPR compliant
WhatServiceLocation
  • Database, authentication and filesSupabaseEU · Stockholm
  • ApplicationVercelEU · Dublin
  • AI processingAmazon BedrockEU regional profiles
  • System emailLettermintEU
  • Error monitoringSentryEU · no business content

Security in practice

Security at every layer

Encryption

TLS on every connection plus HSTS. Stored data and backups are encrypted with AES-256, and integration credentials get an additional layer of their own.

Access control

Single sign-on with Microsoft Entra ID or Google and multi-factor authentication. Someone removed from your directory loses access to Haavi too.

Application security

Strict Content Security Policy, rate limiting and signed webhooks. Every change is reviewed and tested, and customer data is never used in development.

Audit log

An append-only log records sign-ins, admin actions and data exports. Error monitoring never sees business content.

Retention and deletion

Data is kept for the term of the contract and can be exported. When the contract ends, data is deleted or anonymized within 30 days.

Our own access

Only named administrators with a verified multi-factor session. Every admin access is logged, and there is no way to impersonate a customer user.

For procurement

Ready for your organization's security review

We make security reviews easy, and we are open about what we don't claim, too.

Request security documentation

Haavi Custom includes a security review, a data processing agreement and single sign-on. Read about Haavi Custom

  • Data processing agreement (GDPR Article 28)
  • Sub-processor list with advance notice of changes
  • We fill in your security questionnaire for you
  • The right to request evidence for any claim

Frequently asked questions about security

Where is Haavi's data stored?

In the EU. The database and files are in Stockholm, the application in Dublin and AI processing in Amazon Bedrock's EU regions. Customer content is never stored outside the EEA.

Is our data used to train AI?

No. The AI service does not train models on your inputs or store prompts or responses, and the model provider has no access to them.

Can other customers see our data?

No. Organizations are isolated with database row-level security, so even a bug in application code cannot show another customer's data. Isolation is tested automatically on every change.

Does Haavi support single sign-on?

Yes. You can sign in with Microsoft Entra ID or Google, and multi-factor authentication is available. Mandatory MFA can be enforced in your own identity provider.

Is Haavi ISO 27001 certified?

No. We offer a data processing agreement, the measures described on this page and the right to request evidence for any claim. We also support security testing commissioned by the customer.

What happens to our data if we leave?

You can export your data before the contract ends. After that, data is deleted or anonymized within 30 days, and the deletion is logged.

IDENTIFY SALES OPPORTUNITIES WITH HAAVI

Try free for 14 days – with or without a demo.

Cancel anytimeNo credit card required

We know how good our product is. That's why we want you to test it right away, hassle-free. Register and open Haavi now!