Is Ovida GDPR compliant?

Yes. Ovida is registered in the United Kingdom and fully complies with the EU's General Data Protection Regulation (GDPR), one of the world's strictest privacy frameworks.

Privacy isn't an afterthought at Ovida, it's foundational. We hired a Data Compliance Officer as the fourth person on the team, and we maintain compliance with GDPR across everything we do.

Coaches, counsellors, universities, and large organisations trust Ovida with sensitive conversations. We work to keep their data safe by:

• Complying with GDPR's full set of data protection requirements

• Giving every user (including guests) the ability to view and delete their own data

• Storing data only in the UK on AWS infrastructure

• Never using customer conversations to train AI models

Other certifications

GDPR covers how we handle personal data. Our wider security controls are independently audited too: Ovida is SOC 2 Type 2 compliant and ISO 27001 certified.

Where to read more

• Privacy Notice: linked in the footer of ovida.io

• Trust Center: trust.ovida.io, for audit reports, certifications and security details

• Direct questions: email support@ovida.org