EU data residency
Your data: processing and retention
Form uploads are processed temporarily. Chat history and review documents are retained until your firm deletes them. Account, billing and usage records are retained to operate the service.
Where is our data located?
Data residency follows from how the system is built, not from a promise. Every layer that can touch your client data sits in the EU.
| Hosting and access point | An EU hosting and CDN provider, served from EU edge locations. |
| Reading uploads | A large language model accessed through an EU-resident inference profile (Ireland). No US inference endpoints. |
| Database | A managed database, West Europe region. |
| Document processing | A dedicated server within the EU. |
| Payments | An EU payment provider, for billing and contact details only, under EU processor terms. |
What do you store, and what not?
What we do keep is what is needed to run your account and bill you: your name, business email, firm, VAT number and payment status, plus one line per finished document with the tool and the timestamp. That line holds no client content.
Does this fit my professional confidentiality?
Yes. Your firm stays the controller of your clients' data. Lowkey acts as your processor and handles that data only on your instruction, to produce the result you ask for. A data processing agreement is in place with each underlying processor, and where a transfer would otherwise occur, the EU standard contractual clauses apply.
Working with us as a firm and need the formal data processing agreement? Ask for it and we will send it over. The full processing detail is in the GDPR statement.
Why this differs from a general AI tool
General information, not personalized tax advice. The tools fill in forms and draft the cover letter. The judgement and the responsibility stay with your firm.