Data Residency

Your primary workspace data is stored in the United Kingdom — our managed PostgreSQL database and our serverless functions are in London (eu-west-2), video rendering runs in AWS London, and Netlify serves the pages themselves from its global edge network. Uploaded and generated media is held in Cloudflare R2 object storage, which is globally distributed rather than pinned to a single region. Being straight with you: some processing does happen in the United States, because the AI model providers, our payment processor and our transactional email provider are US-based. Every one of those transfers runs under the safeguards UK GDPR Chapter V requires — the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the Data Privacy Framework in Stripe's case — supported by a documented Transfer Impact Assessment and minimisation of the data sent to model APIs. The table below names each provider and where it sits.

Sub-Processors

Be More Swan uses the following third-party sub-processors to deliver its services. Each is assessed for UK GDPR compliance before we adopt it, and we rely on the provider's data processing terms for every transfer of personal data. Where a row is marked "copy on request", email us and we will send the current agreement.

Changes to this list. We email workspace owners at least 14 days before adding or replacing a sub-processor that handles your personal data, and you can object — see clause 5 of our Data Processing Agreement. Last updated 12 October 2026.

Platforms you connect are not on this list. When you connect an account — Google (Gmail, Search Console, Drive, Calendar), Microsoft Outlook, Canva, your social media accounts, your blog or your CRM — and tell an assistant to use it, we send data to that platform on your instructions. It acts under your own agreement with it, not as our sub-processor.

Encryption Standards

• ✓In transit: All data is encrypted in transit using TLS 1.3. Older cipher suites are disabled.
• ✓At rest: All database storage is encrypted at rest using AES-256 via the managed database provider's native encryption.
• ✓OAuth credentials & API keys: Stored with AES-256-GCM application-layer encryption. Plaintext credentials are never logged or returned to clients.

Security Testing

We have not yet commissioned an independent penetration test. When we do, we will publish the date here and share a summary with customers on request.

Until then, every change must pass our automated test suite before it reaches production, including tests that check one workspace cannot read another's records or files. To report a security concern, email hello@bemoreswan.com with the subject "Security".

Data Retention

• ✓Active accounts: Data is retained for the duration of your subscription.
• ✓After account deletion: Personal data is permanently deleted within 30 days of account closure. An anonymised erasure record is retained for compliance purposes.
• ✓Archived assistants: Kept for 14 days so you can reinstate them, then permanently deleted with their associated data.
• ✓Rejected and abandoned content: Rejected posts, unused generated media and incomplete setups are automatically cleared after 30 days.
• ✓Integration API call logs: Retained for 90 days, then automatically purged.
• ✓Audit records: Audit logs, DPA acceptances and erasure records are append-only and immutable — the database revokes UPDATE and DELETE on them and a trigger blocks any attempt, so they cannot be altered or removed by anyone, including us. This is deliberate: they are the evidence that the other rules above were followed.

Request a Data Processing Agreement

Enterprise customers and partners may request a signed DPA for their records. Complete the form below and we'll respond within 2 business days.