Where Lowkey processes your data: EU only

Where is our data located?

Data residency follows from how the system is built, not from a promise. Every layer that can touch your client data sits in the EU.

Hosting and access point	An EU hosting and CDN provider, served from EU edge locations.
Reading uploads	A large language model accessed through an EU-resident inference profile (Ireland). No US inference endpoints.
Database	A managed database, West Europe region.
Document processing	A dedicated server within the EU.
Payments	An EU payment provider, for billing and contact details only, under EU processor terms.

What do you store, and what not?

What we do keep is what is needed to run your account and bill you: your name, business email, firm, VAT number and payment status, plus one line per finished document with the tool and the timestamp. That line holds no client content.

Refer another firm? We keep a record of which account referred which other account, so the referral reward reaches the right accounts. We also keep a non-reversible fingerprint of the payment card, from our payment provider, so the referral discount applies at most once per card. Both are kept as long as the account exists.

Does this fit my professional confidentiality?

Yes. Your firm stays the controller of your clients' data. Lowkey acts as your processor and handles that data only on your instruction, to produce the result you ask for. A data processing agreement is in place with each underlying processor, and where a transfer would otherwise occur, the EU standard contractual clauses apply.

Working with us as a firm and need the formal data processing agreement? Ask for it and we will send it over. The full processing detail is in the GDPR statement.

General information, not personalized tax advice. The tools fill in forms and draft the cover letter. The judgement and the responsibility stay with your firm.