Factual, boring, reassuring
This page is maintained by the SVARA team to answer common security and privacy questions. It describes current practices — it is not a certification.
Human-in-the-loop by default
SVARA drafts; a person approves. Automatic sending happens only for the specific repeat-question types your team explicitly enables, and can be switched off entirely — everything else always requires an explicit human action.
Data handling
We process the message content needed to draft a reply, plus the metadata needed to route it. Content is encrypted in transit (TLS 1.2+) and at rest, and is retained only for the audit window your plan defines.
EU / GDPR posture
SVARA acts as a processor for the customer data you send through it. Processing is performed in the EU, a Data Processing Agreement is available, and data subject requests are supported. [Placeholder — confirm hosting regions and legal basis with counsel.]
Credentials & tokens
We store OAuth access and refresh tokens only — never channel passwords. Tokens are encrypted at rest with per-tenant keys, held in a managed secret store, scoped to the minimum permissions each channel requires, and revocable by you at any time.
Access control
Internal access follows least privilege, is role-based, requires SSO with MFA, and is logged. Production access is limited to on-call engineers.
No model training on your data
Your conversations are not used to train shared or third-party foundation models. Tone and terminology learning is scoped to your workspace only.
Who else touches the data
A current list is maintained here; customers under a DPA are notified before a new sub-processor is added.
| Sub-processor | Purpose | Region |
|---|---|---|
| Railway | Application hosting | EU |
| Anthropic | Reply drafting (LLM) | EU / US (DPF) |
| Railway | Managed database / conversation storage | EU |
| Railway | Error monitoring & reliability | EU |
| Stripe | Billing and payments | EU / US |
Need a security review pack?
Enterprise plans include procurement and security review support.
Get startedSetup takes under 20 minutes. No new dashboard to learn.
- Instagram DMs
- Facebook messages
- Post comments
- Customer email
SVARA drafted a reply in your tone.
or Discord, WhatsApp, email