Snapshot 253543
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Monitored and Powered by Trust Center twenty.com twenty-status.com security@twenty.com Amazon Web Services PII Amazon Web Services (AWS) provides the cloud infrastructure on which the Twenty CRM runs — compute, managed databases, object storage, and encrypted backups. AWS is Twenty's primary hosting provider. AWS hosts all Customer Personal Data stored in the Twenty CRM — including contacts, companies, notes, activities, attachments — together with related backups and logs. Data is hosted in Germany (Frankfurt, eu-central-1). AWS is always engaged. Anthropic PII Anthropic provides large language models that power Twenty's optional AI features, such as drafting, summarization, and data enrichment. Anthropic processes Customer Personal Data only when a workspace enables AI features and a user runs an AI action — in which case only the specific records or text needed for that action are sent. When AI features are disabled, Anthropic is not a sub-processor. Processed in the United States. Customer data is not used to train Anthropic's models. Transfers are covered by the EU Standard Contractual Clauses. Azure Microsoft Azure provides Azure Foundry model hosting and inference for Twenty's optional AI features. Processing may include prompts, model responses, and CRM content supplied as context. The provider and processing geography depend on the model and deployment used; a European resource location does not guarantee EU-only processing for Global deployments. Microsoft Azure provides Azure Foundry inference for Twenty AI features when requests are routed to Azure. Data may include prompts, responses, and CRM content supplied as context. Processing locations depend on the model and deployment: Global deployments may process outside the EU even when the Azure resource is in Germany. Retention and abuse monitoring depend on the service and approved account configuration. ClickHouse PII ClickHouse provides the analytical database Twenty uses to store audit logs and power in-product analytics and reporting. ClickHouse stores Twenty's audit logs, which record activity within the CRM and can contain Customer Personal Data (for example, the content or identifiers associated with a logged action). Processed in Germany. Always engaged. Transfers outside the EEA are covered by the EU Standard Contractual Clauses where applicable. Cloudflare Cloudflare provides Twenty's content delivery network, DNS, and web application firewall, securing and accelerating traffic to the service. It does not retain Customer Personal Data on a long-term basis. Cloudflare processes Customer Personal Data only in transit — request and response content — together with connection metadata such as IP addresses and request headers, in order to route, cache, and protect traffic. As a content delivery network, processing occurs worldwide across Cloudflare's global edge network. Always engaged. Transfers outside the EEA are covered by the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. Google Cloud Platform PII Google Cloud Platform provides specific Google services that Twenty integrates, such as Maps and Google sign-in. Google provides Maps look-ups, Google sign-in, and Gemini models for Twenty AI features when the relevant Google service is used. Data may include address or location queries, authentication information, and, for Gemini inference, prompts, responses, and CRM content supplied as context. Processing locations and data-handling terms depend on the Google service and API used; this entry does not guarantee Germany-only processing for Gemini. Mistral Mistral AI provides large language models that power Twenty's optional AI features. The AI provider used depends on the model configured for the workspace. Mistral processes Customer Personal Data only when a workspace enables AI features and a user runs an AI action; only the data needed for that action is sent. When AI features are disabled, Mistral is not a sub-processor. Processed in France. Customer data is not used to train Mistral's models. As an EU-based provider with EU hosting, no transfer outside the EEA is required for this processing. OpenAI OpenAI provides large language models that power Twenty's optional AI features. The AI provider used depends on the model configured for the workspace. OpenAI processes Customer Personal Data only when a workspace enables AI features and a user runs an AI action; only the data needed for that action is sent. When AI features are disabled, OpenAI is not a sub-processor. Processed in the United States and the EU. Customer data is not used to train OpenAI's models. Transfers are covered by the EU Standard Contractual Clauses. Sentry PII Sentry provides application error and performance monitoring, helping Twenty detect, diagnose, and resolve issues in the service. Sentry receives error and performance events, including stack traces and request context. Customer Personal Data is not expected to be included, but it may incidentally appear if present at the moment an error occurs; Twenty minimizes this through data scrubbing. Processed in the European Union (Frankfurt, Germany). Always engaged. Sentry is a US company, so any remote access from outside the EU, for example for support, is covered by the EU Standard Contractual Clauses and the EU–US Data Privacy Framework. TypeSafe TypeSafe AI provides evaluation and monitoring of Twenty AI features. Processing may include AI interaction content, such as prompts, responses, and contextual CRM data included in the interactions submitted for evaluation. Typesafe AI, Inc. provides AI evaluation and monitoring. Data may include prompts, responses, and contextual CRM data in AI interactions submitted for evaluation. Processing locations, retention, and applicable contractual safeguards are being verified.