Your customers' data stays in Europe. And it has an expiry date.
Databases and storage in Frankfurt, recordings and transcripts that delete themselves, protected log-ins and clear rules on who you may call. Here is how it works, with no small print.
Databases in FrankfurtTwo-step and passkeysSTOP on WhatsAppDPA published
6 Nov 2026 · call recorded
The transcript is stored in Frankfurt, on the contact's record; the recording stays with the voice provider, with data in the European Union.
6 May 2027 · recording deleted
After 6 months, at the voice provider too.
6 Nov 2028 · transcript deleted
After 24 months, at the voice provider too.
At any time · contact deleted
If your customer asks, the individual contact is deleted on request.
Where the data lives.
We chose providers that keep data in the European Union, starting with the ones that store it.
- Databases and storageOn DigitalOcean, in the Frankfurt data centre.Frankfurt · EU
- VoiceElevenLabs, with data residency in the European Union.EU
- Usage analyticsPostHog, with servers in the European Union.EU
- Other providersSome may process data outside the European Economic Area, always with the required safeguards, such as standard contractual clauses. The details are in the privacy policy.with safeguards
Only the right people get in.
Protect your team's account with the safest ways to log in, and give everyone the right role.
- Two-stepA second check on top of the password, every time you log in.verification
- PasskeysLog in with your fingerprint or face, with no password to remember.device
- Log-in codeA code by email instead of a password.email
- RolesEveryone on the team sees and does only what they need.team
On for 5 of 5 usersOn
Today at 9:12, from the practice laptopPasskey
Today at 9:40Code
Sees the inbox and contacts of her workspaceRole
You only call and message people who want it.
Outbound campaigns follow strict rules. They protect your customers and your reputation too.
- Legal basisTo call a contact outbound you must state the legal basis you rely on.required
- FrequencyThe same contact isn't called or messaged too often.limits
- STOPAnyone who writes STOP on WhatsApp gets no more messages.WhatsApp
- TemplatesOutside the WhatsApp conversation window, only templates approved by Meta are used.Meta
All in black and white.
When you use Aurora for your customers, you are the controller of their data and we are the processor. The DPA governs that relationship.
- DPAThe data processing agreement is published: read the DPA.published
- Sub-processorsThe up-to-date list of providers that process data for us, on request at [email protected].on request
- DeletionAn individual contact is deleted on request. For your own data, see Data deletion.on request
- PrivacyQuestions about personal data: [email protected]. Cookies on this site are covered in the cookie policy.email
Questions about security and data
Where is the data stored?
Databases and storage are on DigitalOcean in Frankfurt, in the European Union. Voice uses ElevenLabs with EU data residency and usage analytics use PostHog in the EU. Some providers may process data outside the EEA with the required safeguards: it is all in the privacy policy.
How long do you keep recordings and transcripts?
Call recordings are deleted after 6 months and transcripts after 24 months, at the voice provider too.
Can I have a contact's data deleted?
Yes. An individual contact is deleted on request. For data about you or your account, write to [email protected].
Do you have a DPA?
Yes. The Data Processing Agreement is published on the site and governs the processing we carry out on your behalf on your customers' data.
Who are the sub-processors?
They are the providers that help us run the service, such as hosting and voice. The up-to-date list is available on request at [email protected].
Enter your website. In a few minutes you hear your assistant.
Aurora reads the site, tells you what it understood and prepares the agent. Then you try it live: it calls you, answers in your chat, fills in your form. You decide afterwards.
Rather talk it through with us?