Trust Center
Security, Privacy & Compliance at Aiva
Aiva is a SaaS platform by Comsat Media GmbH. We operate Aiva in line with our TISAX label (AL2) and follow the controls of BSI IT-Grundschutz.
EU hosting
EU (Frankfurt, Germany)
Encryption
TLS 1.3 in transit · AES-256 at rest
TISAX AL2
Holder: Comsat Media GmbH
Audit log
Active, append-only.
Hosting & infrastructure
- Primary location
- EU (Frankfurt, Germany)
- Database
- PostgreSQL with row-level security per tenant
- Backups
- PITR 7 days + nightly off-site (Hetzner EU)
- Restore drill
- In preparation
Subprocessors
7 active sub-processors.
Cloudflare WorkersEdge Runtime / SSREUJa
Legal region
EU
DPA
Ja
ElevenLabsVoice / Audio AivaEU/USJa
Legal region
EU/US
DPA
Ja
TavusVideo AivaUSJa (SCC)
Legal region
US
DPA
Ja (SCC)
MuxVideo StreamingEU/USJa
Legal region
EU/US
DPA
Ja
OpenAILLM FallbackEU (data residency)Ja
Legal region
EU (data residency)
DPA
Ja
ResendTransactional EmailsEUJa
Legal region
EU
DPA
Ja
Lovable Cloud (DB + Storage)Hosting, Database, Object StorageEU (Frankfurt)Ja
Legal region
EU (Frankfurt)
DPA
Ja
Documents & status
DPA / Data Processing Agreement
Available on request
TISAX label (holder: Comsat Media GmbH)
AL2
Audit log
Active
MFA for admins
Enforceable
EU AI Act – risk classification
limited risk (chatbot with transparency obligation, Art. 50 EU AI Act)
ISO 27001
Under evaluation
Contact
This page is maintained by Comsat Media GmbH and describes the controls currently in place. It does not replace a certificate from an independent auditor.