Your data. Stored in Europe.
matflow stores your layouts, accounts and logs exclusively on servers in the European Union (Microsoft Azure). For maps and for the Matty assistant, service providers outside the EU are involved. We name them below with purpose and location. No access without authorisation.
Hosting location
Germany: Microsoft Azure, Germany West Central region (Frankfurt). That is where your layouts, accounts and logs are held.
Encryption
Transmission exclusively via HTTPS/TLS. Data encrypted at rest.
GDPR
Data processing under Art. 28 GDPR. Privacy policy and cookie policy on matflow.com.
Roles & permissions
With editor, commenter and viewer roles you control who can change the plan and who can only view it.
Who processes your data and where
“Exclusively EU” applies to our storage: layouts, accounts and logs. Beyond that, individual features involve service providers that process outside the EU; they may also store the data transmitted to them there for the duration of their processing. This list names every service provider in use, with purpose and location.
In the European Union
- Microsoft Azure App Service: operation of the API and the live relay
- Microsoft Azure SQL Database: storage of accounts, permissions, layout and log data
- Microsoft Azure Blob Storage: storage of preview images, backgrounds and model files
- Microsoft Azure Key Vault: safekeeping of access secrets
- Microsoft Azure Communication Services: sending system emails (confirmation, password, invitation)
- Microsoft Entra ID: sign-in via Microsoft SSO where your organisation uses it, in the EU or in your own directory
- Exponential (Hetzner Online GmbH): ticket system behind the feedback button in the application; loaded only for people who have been enabled for it
- Microsoft Azure Speech Services: converting spoken voice input to the Matty assistant into text, where offered
Outside the European Union
- Mapbox, Inc. (United States): map tiles, satellite imagery and address search. The request is made directly from your browser; Mapbox sees your IP address and, for address search, the search term.
- TypeSafe AI, Inc. (United States): interpreting your input to the Matty assistant (quick commands, tidying, help). Transmitted are the input text and an excerpt of the scene (object, room and area names).
- Anthropic PBC (processing worldwide, storage United States): Matty stage 2: answering layout questions and planning multi-step tasks. Transmitted are the input text and an excerpt of the scene. Only in organisations where the extended level of Matty is switched on.
- Stripe, Inc. (United States): payment processing for planner licences. Not currently set up.
- Cloudflare, Inc. (United States): delivery of this website. The cookieless visitor statistics for the website are held in a database in Western Europe.
- Google LLC (United States): depending on how the matflow environment is equipped: the photorealistic 3D map in the editor and the “Presentation” view (Google Maps Platform). If no Google map is offered, no request is made to Google; if one is shown, Google receives your IP address and technical browser details directly from your browser.
In addition, GitHub, Inc. is used for source control and deployment; in normal operation this involves no access to your content. Legal bases, retention periods and your rights are set out in the privacy policy. The full sub-processor record is made available to customers on request.
Questions about security?
Our team is available for security questions, data processing agreements (DPAs) and data protection impact assessments.
Get in touch