Privacy & GDPR

GDPR and Chat FederationWhere SyncRivo Is Hosted and How Message Data Flows

For EU enterprises, every layer of the messaging stack falls under GDPR — including the bridge between platforms. SyncRivo is hosted in the US (Google Cloud us-central1), provides a DPA and sub-processor list, and does not store message content on the normal relay path.

Bridge Slack, Microsoft Teams, Google Chat, Zoom, and Cisco Webex — and review the DPA with your privacy team before you go live.

Book a Demo Request DPA

How SyncRivo Handles Data

Hosted in the US

SyncRivo runs in the US on Google Cloud (us-central1). There is no EU-region or customer-selectable data residency.

No message storage on the relay path

Message content is not stored on the normal relay path; only message IDs are kept. The optional retry queue temporarily holds undelivered messages.

DPA + sub-processor list

A Data Processing Agreement and sub-processor list are available.

Security controls

Encrypted in transit (TLS); OAuth tokens encrypted at rest; optional MFA. SyncRivo does not currently hold a SOC 2 report; we provide a security questionnaire and architecture review on request.

Frequently Asked Questions

GDPR is not a certification, so no vendor is "GDPR certified". SyncRivo provides a DPA and sub-processor list. Message content is not stored on the normal relay path — only message IDs are kept so threads, edits and reactions stay in sync, and an optional retry queue temporarily holds undelivered messages. SyncRivo is hosted in the US (Google Cloud us-central1); there is no EU-region hosting, so EU organizations should review the DPA with their privacy team.

SyncRivo processes message routing metadata (message IDs, user IDs, timestamps, delivery status) as a data processor on behalf of the customer controller. Message content is not stored on the normal relay path (the optional retry queue temporarily holds undelivered messages). Synced directory data such as names and emails is stored to match people across platforms. SyncRivo's DPA details the data processing.

SyncRivo is hosted in the US (Google Cloud us-central1) for all customers. There is no customer-selectable or EU-region data residency. Messages relayed between your platforms pass through US infrastructure.

Yes. A DPA and sub-processor list are available. Contact us to review the DPA with your privacy team.

Under GDPR, individuals have rights to access, rectification, erasure, and portability of their personal data. For SyncRivo: message content is not stored on the normal relay path. Stored data such as message IDs and synced directory records (names, emails, platform user IDs) can be deleted on request through support.

Reviewing SyncRivo for GDPR?

Request the DPA and sub-processor list, or book a demo for a guided pilot on your own channels.

Book a Demo Request DPA