Trust
The facts procurement and legal teams ask for, in one place.
Hosted in the EU. Application servers run in Germany and the database runs in Frankfurt.
Unveilio never writes to your website, your content system or your DNS. It writes the change. Your team applies it.
Connections to your ad and analytics accounts are read-only today. Making changes in ad accounts is a later step, and it opens only after the controls for it are in place.
Every gap, citation and presence figure is stored against the raw response that produced it. A value without provenance is left out, never estimated.
Output that has not passed human review carries a machine-generated label.
Every sub-processor is named. A request to a provider outside the allowlist fails and is never rerouted.
Your own site is crawled only after you authorise it with a DNS record.
Competitor sites are never crawled. What is known about a competitor comes from stored citation data.
Raw responses and the record of what was shipped are archived, never deleted.
The data processing agreement template is on the agreement page.
Sub-processors
Every active sub-processor in the registry the code is held to. A request to a provider that is not listed here is never made.
| Provider | What it does | Region | Data processing agreement |
|---|---|---|---|
| Hetzner Online GmbH | Application hosting for the API and the web apps. | EU (Germany, Nuremberg) | In place |
| Brevo (Sendinblue SAS) | The contact and audit request forms, and the confirmation emails for them. | EU (France-headquartered, hosted in France and Belgium) | In place |
| Google (Ads and Tag) | Advertising measurement on the go.unveilio.io landing pages, only after the visitor accepts. | US (standard contractual clauses and the EU-US Data Privacy Framework) | In place |
| Doppler | Secrets management. | EU (EU-hosted workplace) | In place |
| Supabase | The database. | EU (Frankfurt) | In place |
| Auth0 (Okta) | Sign-in and account security. | EU (Frankfurt) | In place |
| Google (Google Identity) | Optional sign-in with a Google account. | US (standard contractual clauses) | In place |
| Microsoft (Entra ID / Microsoft Account) | Optional sign-in with a Microsoft account. | US (standard contractual clauses) | In place |
| Meta (Facebook Login) | Optional sign-in with a Facebook account. | US (standard contractual clauses) | In place |
| Mistral AI | Language model that drafts remediation text. | EU (France) | In place |
| Anthropic | Language model for review checks, held as a rollback and not in routine use. Not reachable by an organisation set to EU-only routing. | US (standard contractual clauses) | In place |
| Amazon Web Services (AWS Bedrock Mantle, Stockholm) | Language model that reviews drafted text and classifies sectors. | EU (Sweden, Stockholm) | In place |
| DataForSEO (DataForSEO OU) | Search and AI-assistant probing: the questions asked and the answers stored. | EU (Estonia) | In place |