# How we store and protect data Data lives in the European Union on certified infrastructure, roles define access, and the database is copied every day. ## Where data is stored The database and the application run in European Union regions. The Kro assistant uses an outside provider’s models — see the separate block below. ### Database and sign-in Supabase — managed PostgreSQL on Amazon Web Services, region eu-north-1 (Stockholm, Sweden). Company data, users and sign-in sessions live here. ### Application Google Cloud Run, region europe-north1 (Finland). The application server handles every request and checks permissions. ### The krokul.com website Firebase Hosting by Google — public pages served through a global delivery network. Company data lives only in the database. ### Encryption Connections to Krokul are protected by HTTPS. The database provider encrypts data at rest (AES-256) and in transit (TLS). ## Certified provider infrastructure Krokul runs on infrastructure that independent auditors review regularly. The certificates and reports are published by the providers themselves. ### Supabase — database and sign-in SOC 2 Type 2 with an annual audit, and ISO 27001. [Supabase security](https://supabase.com/security) ### Supabase — SOC 2 report How Supabase goes through its SOC 2 audit and what it covers. [SOC 2 at Supabase](https://supabase.com/docs/guides/security/soc-2-compliance) ### Google Cloud Run — application ISO/IEC 27001, 27017 and 27018, SOC 1, 2 and 3 reports, PCI DSS — per the Google Cloud services table. [Services in scope](https://cloud.google.com/security/compliance/services-in-scope/) ### Firebase Hosting — website ISO/IEC 27001, SOC 1, 2 and 3 reports, PCI DSS — per the same Google Cloud table. [Services in scope](https://cloud.google.com/security/compliance/services-in-scope/) ### Anthropic — Kro assistant models SOC 2 Type I and II, ISO 27001:2022 and ISO/IEC 42001:2023 — the international standard for AI management systems. [Anthropic certifications](https://privacy.claude.com/en/articles/10015870-what-certifications-has-anthropic-obtained) ## Access and control A role decides what each person sees and does — and the server enforces it. ### Roles Owner, head, manager, accountant and other roles set who sees and changes what. Cost and margin are a separate permission. ### Checks on the server The server checks permissions on every request — the same for the screen, an API key and the Kro assistant. ### Two-factor sign-in After the password, the system asks for a one-time code from an authenticator app. An administrator can require two-factor sign-in for everyone in the company and reset it for a user who lost a device. ### Action log and trash Every change is logged with its author and time. Deleted items go to the trash, where you can restore them. ## The Kro assistant and your data The assistant answers with Anthropic models. Here is what that means for your data. ### What reaches the model The conversation with the assistant and the records it opens to answer. The assistant acts with the rights of the user who is talking to it, so it cannot see what that user cannot. ### Not used for model training Under Anthropic’s terms for the commercial API, prompts and responses are not used to train models unless the company itself agrees. [Anthropic policy](https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training) ### How long it is kept Under its standard policy, Anthropic deletes prompts and responses on its side within 30 days. [Retention periods](https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data) ### The conversation in Krokul A conversation with Kro is kept in Krokul for 30 days after the last message. You can delete it at any time — permanently. ### Where it is processed The request to the model is processed on Anthropic’s infrastructure, which may be outside the European Union. The Krokul database stays in the EU. ### You can switch it off The assistant can be switched off for the whole company or for individual roles in the settings. ### Call recordings When Kro analyses a call recording, the Krokul server sends the audio to Google Cloud Speech-to-Text for transcription, and this processing may take place outside the European Union. Krokul keeps the transcript and the summary; it does not store the audio — the recording stays with the telephony service. Only the company administrator can turn on analysis of all new calls, and turns it off in the same place, under Usage. ## Backups Every day the system makes a full copy of the database and ships it to separate private storage outside Supabase. The system reads each copy back and verifies it before counting it as saved; older copies rotate on a schedule. ## Your data stays yours The data belongs to your company, and you can take it with you at any time. ### Export on every plan Tables to Google Sheets, documents to Google Docs, contacts to vCard. The free plan included. ### An API for the whole interface Public API v1 covers everything in the interface; the documentation is in English. [API documentation](https://app.krokul.com/api/v1/docs) ### Webhooks Events reach your systems through a queue, with delivery retries and a log. ## Support The Kro assistant answers right away — about setup, your data and what the system can do. When a question needs a person, Kro hands it to the Krokul team together with the conversation. A partner implementer takes on complex setup and data migration. ## Questions and answers ### Where is the data physically stored? In the European Union: the database in region eu-north-1 (Stockholm), the application in region europe-north1 (Finland). ### What certifications does the infrastructure have? Our providers’ infrastructure is certified: Supabase holds SOC 2 Type 2 and ISO 27001, while Google Cloud Run and Firebase Hosting are in scope of Google Cloud’s ISO/IEC 27001 certification and SOC reports. The providers publish the certificates and reports themselves. ### Is my data used to train models? No. Krokul does not train models on company data, and under the commercial API terms Anthropic, whose models the Kro assistant uses, does not use prompts and responses for training unless the company itself agrees. ### Does data leave the EU? The database and the application stay in the EU. A request to the Kro assistant is processed by Anthropic, and that processing may take place outside the EU; the assistant can be switched off. ### How often is the database backed up? Every day. The copy goes to separate private storage outside the database provider and is verified by reading it back. ### How do we take our data if we decide to leave? Export to Google Sheets, Docs and vCard is available on every plan, and the public API returns everything in the interface. ## See how it works on a demo company Roles, the action log and export — on a company already filled with deals, projects and hours. --- App: https://app.krokul.com/ · API: https://app.krokul.com/api/v1/docs