Data Processing Agreement

kvit processes personal data on behalf of its B2B customers (controllers). This page will host the standard AVV (Auftragsverarbeitungsvertrag) template for download and electronic signature once our legal counsel has finalised it.

If you need a DPA in advance of public launch — for example as part of a vendor review at a regulated company — write to legal@kvit.ai and we will send the current draft within one business day.

Sub-processors

Current sub-processors: Postmark (US/DPF — transactional email); Twilio (US/DPF, EU region — SMS, WhatsApp, voice SIP); Vapi (US/DPF — voice agent orchestration); ElevenLabs (US/DPF — voice synthesis); Pingen (CH — letter print and dispatch); Anthropic (EU instance — LLM, primary); OpenAI (EU instance — LLM, fallback); WorkOS (US/DPF — authentication); Vercel (EU region — web hosting); Neon (EU region — Postgres database); Upstash (EU region — Redis cache and queue); Cloudflare (EU region — object storage and CDN); Stripe (EU + US — SaaS billing and Stripe Connect); Sentry (EU region — error monitoring); Plausible (DE — privacy-friendly analytics). Customers are notified at least 30 days in advance of any change.