Region
The shared hosted service runs on AWS in the United States (US East, N. Virginia), with backup copies on AWS in Sydney, Australia. We host in another AWS region when a customer needs it.
Trust centre
What we run, and where
Plain answers about the hosted service: where it runs, who else processes data, how sign-in and audit work, and where to read the details.
Hosted service
Where it runs and who is involved
Sub-processors
The companies that process data for the hosted service are listed at liyagent.com/subprocessors. We update the list before a new one starts.
Backups
The database is backed up with point-in-time recovery, and stored files are backed up daily.
In transit
Traffic to the service travels over TLS.
Access and evidence
Who gets in, and what is recorded
Sign-in
OIDC single sign-on (Entra ID, Okta, Google), passkeys and SCIM 2.0 provisioning.
Tenant isolation
A tenant's data can share tables behind row-level security, sit in its own schema or have a dedicated database.
Audit
Every call, cost and decision in a hash-chained log you can verify and export.
Your personal data
Ask for a copy or for deletion through the privacy request form at liyagent.com/privacy/request.
Frameworks
Frameworks and audits
A control map
The platform's controls are mapped to the EU AI Act and the NIST AI Risk Management Framework, and exported for your own assessment.
Your own environment
If the hosted service does not fit your rules, run Liyagent in your own cloud account or data centre under the Enterprise licence.
Documents
Read the details
Privacy policy
What we collect, why and for how long: liyagent.com/privacy.
Data Processing Addendum
GDPR Art. 28 processor terms: liyagent.com/dpa.
Sub-processors
Who processes data for the hosted service: liyagent.com/subprocessors.
Data handling
What leaves your network and what never does: liyagent.com/docs/govern/data-handling.
Questions
Frequently asked questions
Where is our data stored?
On the shared hosted service, on AWS in the United States (US East, N. Virginia), with backup copies on AWS in Sydney, Australia. We host in another AWS region when a customer needs it, and in your own environment the data stays wherever you run it.
Which AI model providers see our data?
On the hosted service, the providers on the sub-processors list, and only what an agent sends while it works. In your own environment, the providers you choose.
Can we keep everything in our own country?
Yes. We can host it in the AWS region you need, or you run Liyagent in your own environment under the Enterprise licence.
How do we reach you about privacy or security?
Write to privacy@liyagent.com.
Related