Amsterdam
Our application and database infrastructure runs in Amsterdam and Frankfurt. Backups stay within the same region.
Your data stays in Europe, always.
EchoChat runs on European infrastructure, so your stored data lives only on EU servers and no provider trains on your data. You can also switch on Zero Data Retention, which has providers delete your prompts and responses right after each request. Privacy is the foundation here, not a checkbox bolted on after the fact.
What ZDR means in plain language
ZDR stands for Zero Data Retention. When you turn it on, the AI provider is contractually configured to keep your data no longer than it needs to: as soon as your prompt is processed, the input and response are deleted, so nothing lingers on the provider's servers. Your history stays safely on our EU servers either way, and with ZDR on we only route to providers and model versions that support it.
Where your data lives
Frankfurt
We only use EU data points, closest to our clients. This not only increased speed, but also avoids any data being left behind outside the EU.
Guarantees
What happens to your data
No training on your data
Every provider we work with has a contractual clause that excludes your content from model training. It is a hard guarantee, not a setting you have to enable per chat.
Your data stays on EU servers
Your history and files live only on our own EU servers, and all observability runs on EU providers too. Turn on Zero Data Retention and your prompts, attachments, and responses are deleted right after each request, even when a provider's server sits in the US, with nothing cached, logged, or retained there.
Compliance
GDPR alignment
Retention controls
Admins decide how long chats and files are kept, with separate settings for incognito sessions. Defaults are conservative.
Access logs
Every read of a shared chat or project is logged. Admins can export audit trails for compliance reporting.
Right to deletion
On request we delete your account and all associated data. Deletions are fully propagated within 30 days, including backups.
How it works
How a message moves through the system
Three steps. The first two run entirely in Europe, and at the AI step you can enable Zero Data Retention so nothing is kept, wherever it runs.
Browser
Message is scanned for sensitive data before it leaves the device.
EchoChat (NL)
Authentication, governance, and routing run in Amsterdam.
Model provider (ZDR)
Inference runs at the model provider. The server may sit in the EU or the US; with Zero Data Retention enabled, your prompt and the response are deleted immediately after the request, so nothing is retained there.
Questions about data, privacy or our local data storage?
Reach out to us to have a conversation, or try it out yourself.