Everything in the EU
Data, documents and AI processing always stay in the EU. Customer content is never stored outside the EEA.
Security
Teams use Haavi for draft bids, pricing and references. That is why Haavi is built to keep data in the EU, separate from other customers and out of AI model training.
Data, documents and AI processing always stay in the EU. Customer content is never stored outside the EEA.
Database row-level security isolates every organization. Isolation is tested automatically on every change.
Your data is never used to train models. The AI service does not store prompts or responses.
Data location
Your draft bids, pricing and AI conversations stay confidential: other customers never see them, and they are never used to train AI models. They also stay in the EU, stored in Stockholm and processed in the EU regions of the world's leading cloud platforms.
Security in practice
TLS on every connection plus HSTS. Stored data and backups are encrypted with AES-256, and integration credentials get an additional layer of their own.
Single sign-on with Microsoft Entra ID or Google and multi-factor authentication. Someone removed from your directory loses access to Haavi too.
Strict Content Security Policy, rate limiting and signed webhooks. Every change is reviewed and tested, and customer data is never used in development.
An append-only log records sign-ins, admin actions and data exports. Error monitoring never sees business content.
Data is kept for the term of the contract and can be exported. When the contract ends, data is deleted or anonymized within 30 days.
Only named administrators with a verified multi-factor session. Every admin access is logged, and there is no way to impersonate a customer user.
For procurement
We make security reviews easy, and we are open about what we don't claim, too.
Request security documentationHaavi Custom includes a security review, a data processing agreement and single sign-on. Read about Haavi Custom
In the EU. The database and files are in Stockholm, the application in Dublin and AI processing in Amazon Bedrock's EU regions. Customer content is never stored outside the EEA.
No. The AI service does not train models on your inputs or store prompts or responses, and the model provider has no access to them.
No. Organizations are isolated with database row-level security, so even a bug in application code cannot show another customer's data. Isolation is tested automatically on every change.
Yes. You can sign in with Microsoft Entra ID or Google, and multi-factor authentication is available. Mandatory MFA can be enforced in your own identity provider.
No. We offer a data processing agreement, the measures described on this page and the right to request evidence for any claim. We also support security testing commissioned by the customer.
You can export your data before the contract ends. After that, data is deleted or anonymized within 30 days, and the deletion is logged.
IDENTIFY SALES OPPORTUNITIES WITH HAAVI
We know how good our product is. That's why we want you to test it right away, hassle-free. Register and open Haavi now!