Your data stays in the EU, and stays yours
Where kennt.ai runs, how customers are kept apart, how you sign in, and who processes data for us.
Hosted in the EU
- Database, login and background jobs run on Supabase in the EU: AWS eu-central-1, Frankfurt.
- The website and the app are served by Vercel.
- Encrypted in transit (TLS) and at rest. Secrets live in a vault, never in code.
Every customer kept apart
- Every customer record carries its project, and the database enforces row-level security on every table: you can only read the projects of your own organisation.
- The app reads with your own session, so these rules apply to every page you open. Background jobs use a scoped helper that limits each query to one project.
- Automated tests check the isolation on every change; a new table without row-level security fails the build.
Login without passwords
Sign in with Google or a one-time link or code sent to your e-mail. kennt.ai stores no passwords. Roles per organisation: owner, admin, member.
What we store
Mostly company data: your brands, competitors, questions and markets, and the AI answers we collect for them. Google Analytics 4 data arrives aggregated (sessions and key events by source, country and week), never as individual visitor profiles. The AI models we use (Anthropic's Claude) don't train on your data.
Sub-processors
| Service | Purpose | Where |
|---|---|---|
| Supabase | Database, login (authentication), background jobs and the kennt.ai Score function | EU (AWS eu-central-1, Frankfurt) |
| Vercel | Hosting of this website and the kennt.ai app, content delivery, server logs | Functions in the EU (fra1, Frankfurt); global edge network for delivery |
| DataForSEO | Asks AI engines (ChatGPT, Gemini, Google AI Mode, AI Overviews) the tracked questions and returns their answers. Receives questions, country and language, no visitor data | EU (Estonia) |
| Anthropic | AI models (Claude) that analyse AI answers, set up the free check (brand, category, competitors, questions) and power the AI analyst. Not used to train models | USA |
| Stripe | Payments, invoices, subscriptions | EU / USA |
| Resend | Sending e-mails: login links and codes, reports, service messages | Sending from the EU (AWS eu-west-1, Ireland); account data, e-mail metadata and logs in the USA |
| “Sign in with Google” (only if you choose it); reading Google Analytics 4 and Search Console data (only if a customer connects them) | EU / USA | |
| Cloudflare Turnstile | Bot protection for the free kennt.ai Score (checks browser signals, sets no tracking cookies) | Global |
| Slack | Weekly report and AI analyst in Slack (only if a customer connects a workspace) | EU / USA |
Legal entities and transfer bases are listed in the data processing agreement (DPA). The DPA and privacy policy are drafts under legal review.
Contact
Security questions or a vulnerability to report: hello@kennt.ai.