Hosting and encryption

Here's the essential on hosting and data protection. For the full, up-to-date detail, the reference is the Privacy policy.

Where data lives

Navi's database and application storage are hosted in the European Union (Supabase, EU region).

Some technical providers are based outside the EU — infrastructure hosting, the AI model that writes the answers, email delivery. Those transfers are framed by the European Commission's Standard Contractual Clauses (SCCs). Each subprocessor is bound by a Data Processing Agreement under Article 28 of the GDPR.

The full, named list of subprocessors (role, location, safeguards) is published in the Privacy policy — that's the authoritative source.

Encryption

Data is encrypted in transit (TLS) and at rest.

Next

To learn which data is processed and how long it's kept, see Data processing and retention.