Data Residency

Last updated: 2026-05-11

AudioMap is a European product. Your audio, transcripts, and knowledge base are stored and processed exclusively on infrastructure located in the European Union.

Aligned with the AEPD guidance of 20 April 2026

On 20 April 2026 the Spanish DPA (AEPD) clarified that automated AI voice transcription is full personal data processing subject to GDPR, not a low-risk technical feature. The sovereignty described on this page is what enables AudioMap to pass the due diligence required of its customers. Point-by-point mapping at AEPD compliance.

AEPD compliance →

Where is your content stored?

Uploaded audio is stored in Cloudflare R2 with explicit EU jurisdiction (not the Global jurisdiction, which may route to the US). The relational database lives on a dedicated Hetzner server in Germany (Falkenstein), under our direct control.

Where is your content processed?

Primary transcription is performed by AssemblyAI through its European endpoint (api.eu.assemblyai.com). As fallback, a local Whisper runs on our own Hetzner DE server (faster-whisper large-v3-turbo): if AssemblyAI does not respond, no byte leaves Germany. Knowledge-base analysis and chat uses Google Vertex AI in the europe-west1 region (Netherlands). The workers live on our Hetzner EPYC server.

Are there any exceptions?

Only two: (1) payment processing is handled by Stripe (US), but Stripe never receives audio content or transcripts — only payment data. (2) initial authentication may pass through Keycloak on EU infrastructure under our control. No byte of user content leaves the EU.

How can I verify this?

We publish the up-to-date subprocessors list at /legal/subprocessors. For B2B customers with a signed DPA, we can jointly audit the network traces of a specific job.

Contact

If you have questions about how your data is handled, write to [email protected].