Privacy-led design
Tavory is built from Switzerland with Swiss privacy principles, clear data controls and no inflated hosting claims.
Security and privacy
Control is part of the product.
Tavory is designed to make privacy, provider access and AI spending understandable. This page distinguishes active protections from account features that require additional setup.
Protected files and secrets
Configured user files are stored in Cloudflare's European region. Personal provider keys are encrypted before server-side storage and are never returned to the browser.
Visible cost controls
Plan budgets, request costs and hard limits are designed to keep AI spending visible instead of surprising you at the end of the month.
What Tavory does today
- Uses Firebase authentication for account identity.
- Uses configured Cloudflare R2 storage in the EU region for user files.
- Uses a server-side worker for account usage and protected state.
- Keeps personally added provider keys encrypted and server-side.
- Tracks usage against visible plan budgets and limits.
Account-dependent controls
- Swiss hosting is not used for the current storage configuration; user files use the configured European Cloudflare region.
- Multi-factor authentication and device session controls are available only when enabled for the account in Firebase.
- Enterprise billing, team administration and connected providers are shown only after their required account setup is complete.