Your data stays in the EU. And under your control.
Tuumo runs in Finland on a Finnish cloud, keeps your workspace's data with two European sub-processors, and gives you the tools GDPR asks for in the app itself.
Where your data lives
Your events, your account and every workspace's data
Helsinki, Finland
UpCloud's data center in Helsinki runs the whole service and stores the events.
Off-site database backups
Frankfurt, Germany
The database (accounts, settings, the event catalog and the query history) is backed up to a second UpCloud location.
Two sub-processors. That's all.
Both are European companies. Answers leave the service only to the AI tools your members choose to connect.
| Sub-processor | Country | Purpose | Data it handles |
|---|---|---|---|
| UpCloud Oy | Finland | Hosting, storage and backups | All service data, in Helsinki; database backups in Frankfurt |
| Scaleway SAS | France | Sending email | Your email address and the message, for sign-up codes, password resets and invitations |
If you sign in with Google or GitHub, they only confirm who you are; they get no access to your workspace.
How we protect it
A separate store per workspace
Every workspace has its own data store, its own storage bucket and its own read-only credentials. One workspace can never read another's events.
Encrypted in transit
Every public connection is TLS: to the API, to the app and to the AI tools. Inside the service, database and storage connections use TLS and verify the server's certificate.
Keys we cannot read back
API keys are stored only as hashes and shown once. A workspace's storage credentials are encrypted in the database.
Queries are read-only
AI tools and analyst keys query their own workspace with read-only statements. A tool has its member's permissions and never more, and ingest keys can send events but never read.
Every query on the record
Each query is kept in the workspace's history with who ran it, from which tool or key, what it cost and what it returned.
Changes take effect fast
Revoke a key, change a role or remove a member, and every key and AI tool follows within a minute.
GDPR, built in.
You are the controller of your users' data and Tuumo is your processor. Everything you need to answer a request is in the app.
Data processing agreement
Tuumo processes your users' events as your processor, under a published data processing agreement.
Access requests
Export the events of one session by its session id, or the whole workspace, as one machine-readable file.
Erasure
Admins file deletion requests for a user, a session or a property value, in the app or from an AI tool.
Retention you choose
Set how many days events are kept; older events are deleted every night.
Deleting a workspace
Access ends within a minute, and the data is destroyed 30 days later.
No tracking on this site
This website sets no cookies and runs no analytics or ad trackers.
Questions about security or privacy?
Write to us and the people who built Tuumo will answer.