Only what delivery needs
Numbers, senders, texts and the delivery records needed to deliver, trace and bill each message.
Trust Center
GDPR and data protection for SMS traffic
Phone numbers, sender names and message texts are personal data. This is how Auvia Gateway keeps them protected, and what you control as the operator of the traffic.
Responsibilities
Who is responsible for which data
| Data | Who decides how it is used | Where it is kept |
|---|---|---|
| SMS traffic: numbers, senders, texts, receipts | The operator or provider sending the traffic | The installation's own database: your servers on-premise, or a dedicated cloud installation |
| Panel and portal users | The operator running the installation | The installation's own database |
| Requests sent through this website | Auvia Gateway | See the privacy policy |
Built in
How the platform protects personal data
Your servers if you need them
On-premise installations keep all traffic on your infrastructure.
Each customer sees only their data
The customer portal is isolated per account by the server.
Every action recorded
An audit log of every user action and sign-in, kept 90 days.
Masked before it leaves
The AI console replaces numbers, names, texts and IPs with placeholders before sending anything to a provider.
Encrypted in transit
TLS for SMPP and HTTPS for the panel, portal and APIs.
FAQ
GDPR questions
Who is the controller of the SMS traffic?
The operator or provider that sends the traffic decides why and how messages are processed. Auvia Gateway is the software that processes them, in a dedicated cloud installation or on the operator's own servers.
Can personal data stay in our country?
Yes. With an on-premise installation, traffic and personal data stay on your infrastructure. Dedicated cloud installations have their own database.
How do we answer an access request for a phone number?
All Messages filters by number and exports the result, so you can find every message sent to or received from that number.
Does the AI console send our data to an AI provider?
Only masked data. Before anything leaves the platform, phone numbers, senders, texts, emails, customer and supplier names, system IDs and IP addresses are replaced by placeholders. Masking can be turned off only for a local model on your private network.
Keep exploring
