Security
Who processes your data, besides us.
Levano is your data processor. These vendors process parts of your data on our behalf. We update this list 30 days before adding or changing a vendor.
- Updated
- Sep 7, 2026
- Version
- 2.0
- Read time
- ~4 min
Our sub-processors
The list below is current as of Sep 7, 2026 and matches the vendors actually in production right now. Each row states purpose, location and the basis for the processing. Each vendor processes only the data its purpose requires, and always under a data processing agreement. You can find our full terms in our Data Processing Agreement (DPA).
PurposeHosting and operations: application servers, database and backup
LocationEU (Nuremberg, Germany)
Basis for transferProcessed within the EEA. No transfer to a third country.
PurposeStorage of case documents, attachments and files
LocationEU (Stockholm, eu-north-1)
Basis for transferProcessed within the EEA. Standard Contractual Clauses (SCC) cover the vendor's support access from a third country.
PurposeSearch index across cases, documents and contacts
LocationEU (Germany, same environment as Levano)
Basis for transferProcessed within the EEA. No transfer to a third country.
PurposeTransactional email: system messages, notifications and invitations
LocationUnited States
Basis for transferThird-country transfer. Data processing agreement with EU Standard Contractual Clauses (SCC).
PurposeSMS: notifications and verification codes
LocationEU (Denmark)
Basis for transferProcessed within the EEA. No transfer to a third country.
PurposeMail and calendar integration with the customer's Microsoft 365
LocationEU (the customer's Microsoft 365 tenant)
Basis for transferProcessed within the EEA. Standard Contractual Clauses (SCC) cover the vendor's support access from a third country.
PurposeMail and calendar integration with the customer's Google Workspace
LocationEU and United States
Basis for transferThird-country transfer. Data processing agreement with EU Standard Contractual Clauses (SCC).
PurposeMitID: login and user identification
LocationEU (Denmark)
Basis for transferProcessed within the EEA. No transfer to a third country.
PurposeBank account information via PSD2, used for reconciliation
LocationEU and the United Kingdom
Basis for transferThird-country transfer. Data processing agreement with EU Standard Contractual Clauses (SCC).
PurposePayment and invoicing of the Levano subscription
LocationEU (Ireland)
Basis for transferProcessed within the EEA. Standard Contractual Clauses (SCC) cover the vendor's support access from a third country.
PurposeAccounting: only the entries and vouchers the customer sends
LocationEU (Denmark)
Basis for transferProcessed within the EEA. No transfer to a third country.
PurposeAI assistant (Claude API): the prompt and the context it is given
LocationUnited States
Basis for transferThird-country transfer. Data processing agreement with EU Standard Contractual Clauses (SCC).
PurposeAI models for selected text and analysis features
LocationUnited States
Basis for transferThird-country transfer. Data processing agreement with EU Standard Contractual Clauses (SCC).
PurposeEmbeddings for semantic search across cases and documents
LocationUnited States
Basis for transferThird-country transfer. Data processing agreement with EU Standard Contractual Clauses (SCC).
PurposeWeb search for the assistant: the search query itself is passed on
LocationUnited States
Basis for transferThird-country transfer. Data processing agreement with EU Standard Contractual Clauses (SCC).
PurposeOCR: text extraction from scanned documents and PDFs
LocationEU (North Europe, Ireland)
Basis for transferProcessed within the EEA. Standard Contractual Clauses (SCC) cover the vendor's support access from a third country.
PurposeError monitoring: stack traces and technical context when something breaks
LocationEU (Frankfurt)
Basis for transferProcessed within the EEA. Standard Contractual Clauses (SCC) cover the vendor's support access from a third country.
AI: the key thing to understand
Anthropic (Claude) is the primary AI vendor in Levano. OpenAI, Voyage AI and Tavily are used for selected features such as analysis, semantic search and web search, and Azure Document Intelligence extracts text from scanned documents.
What holds today:
- Your prompt and the context the assistant is given are processed at the vendor to produce the answer
- None of the vendors may use your data to train models. That is written into the data processing agreement
- We send only the context the task requires, not the entire case
- Transfers to the United States rely on EU Standard Contractual Clauses (SCC)
We do not claim more about vendor retention than we can document. Retention at each vendor follows our data processing agreement with that vendor, and a summary is available on request. If the law changes (for example the EU AI Act), we update the setup and this page.
How we vet a sub-processor
No vendor gains access to data before passing the same review:
- ISO 27001 (or equivalent) required
- GDPR compliance and a data processing agreement
- Geographically EU-preferred; alternatives only with stronger controls
- A documented transfer basis if data leaves the EEA
- Financial stability (we don't want to switch vendor every 6 months)
- Audit rights included in the contract
- Incident response SLA included
How we notify you about changes
We never add or change a sub-processor without notice. In practice that means:
- 30 days' notice before we add or change
- Email to administrative contacts
- An update on this page with a “new” or “changed” tag
- A right to object (per the Data Processing Agreement)
Change history
Here we log every addition and change as it happens, with date and status.
Sep 7, 2026, version 2.0
The list has been brought in line with what actually runs in production. Added: Hetzner, Amazon Web Services (S3), Meilisearch, Postmark, Messaging.dk, Microsoft Graph, Google, Criipto (Idura), Yapily, OpenAI, Voyage AI, Tavily and Azure Document Intelligence. Removed: Microsoft Azure as hosting vendor, AWS SES, Axiom and Vanta. The entries for Anthropic, Stripe, Sentry and e-conomic/Billy have been corrected, and the zero retention wording for Anthropic has been taken out until it can be documented.
Questions?
Questions about a specific sub-processor?
If you'd like to know more about how a specific vendor handles your data, just write to our security team. We usually reply within two business days.
Levano ApS · Lille Torv 2A, 3rd floor · 8000 Aarhus C, Denmark