Your project data verifiably stays in the EU.
searchVIU is certified to ISO/IEC 27001:2022 and stores your project data on Google Cloud in the EU. The documents for your vendor assessment are ready.
Certified to ISO/IEC 27001 since September 2026
searchVIU has been certified to ISO/IEC 27001:2022 since September 14, 2026. The certificate was issued by INTERCERT, and the Stage II audit found no nonconformities. The scope covers the SEO- and AI-based products and services. searchVIU also has a SOC 2 Type 2 report covering Security, Availability and Confidentiality for the period July 14 to September 30, 2026.
Stored in the EU and separated per project
searchVIU is an SEO tool from Bonn. Your project data and all analyses are stored on Google Cloud in the EU, and the AI assistant runs on Vertex AI in the EU. For sign-in (Firebase Authentication) and sending emails (SendGrid), searchVIU uses services with a US connection. This is covered by the data processing agreement and the list of sub-processors.
Your data does not train any AI.
The AI assistant runs on Vertex AI in the EU. Customer data is never used for training, and this is set out in the data processing agreement. Crawling, storage and standard reports run without external AI providers. A project admin switches the AI assistant and MCP access on and off. On request, we switch off AI steps in analyses for your project.
What you get for your vendor assessment
searchVIU works with a data processing agreement under Art. 28 GDPR. A versioned, public list shows which sub-processors are involved. You can request the certificate and the DPA for your assessment.
- ISO certificateISO/IEC 27001:2022, issued by INTERCERT
- SOC 2 Type 2 reportafter approval in the Security Center
- Data processing agreementunder Art. 28 GDPR
- List of sub-processorsversioned and public
- AI transparency documenthow searchVIU uses AI
What we audited and tested in 2026
Alongside the audit, 2026 included a penetration test and a restore test.
- July 2026Multi-factor authentication
Available for every account, via app or SMS. The second factor is mandatory for the searchVIU team.
- July 2026Restore test passed
The database was restored from backup in 7 minutes.
- August 2026Penetration test
No critical findings.
- September 2026ISO/IEC 27001:2022
Certificate from INTERCERT, Stage II audit with no nonconformities.
searchVIUbot crawls from a fixed IP and takes care of your server.
The crawler identifies itself as searchVIUbot and comes from a fixed IP that your IT team can allow. If the server slows down or responds with errors, it throttles itself automatically.
- Fixed IPfor allowlisting
- Adjustable crawl rateper project
- On status 429it halves the rate and respects Retry-After
- On server errorsit throttles automatically
200 · /zelte/10:02200 · /zelte/2-personen/10:02429 · /schlafsaecke/10:03 · Retry-After: 60, rate halved200 · /schlafsaecke/10:04 · continuing at half rateFrequently asked questions about security and GDPR
Where is the data stored?
Your project data is stored on Google Cloud in the EU, and the analyses in BigQuery in the EU multi-region. For sign-in and sending emails, searchVIU uses services with a US connection. The list of sub-processors shows which ones.
Does searchVIU train AI on our data?
No. Customer data is never used for training, and this is set out in the data processing agreement.
Can we switch off the AI?
Yes. A project admin switches the AI assistant and access via the MCP server on and off for each project. Both stay off until the admin switches them on. On request, we switch off AI steps in analyses for your project.
Can other customers see our data?
No. Every project has its own dataset and its own service account. Google IAM enforces the separation.
Who in the team sees what?
You set roles and permissions per project, granularly if you wish. Anyone who should only read gets read-only access.
Is multi-factor authentication mandatory?
It is available for every account, via app or SMS. The second factor is mandatory for the searchVIU team. We recommend it for everyone who accesses your projects.
How long is data stored?
6 months by default. The period can be adjusted per project.
What happens to our data when the contract ends?
After the contract ends, we delete your project data within 30 days and backups within 90 days. This is set out in the data processing agreement. If you want your data back before then, let us know.
Which certifications and audit reports does searchVIU have?
searchVIU is certified to ISO/IEC 27001:2022. It also has a SOC 2 Type 2 report covering Security, Availability and Confidentiality for the period July 14 to September 30, 2026. You find both, along with the GDPR assessment report, in the Security Center. Confidential documents are shared after approval.
Who are the sub-processors?
They are listed in a versioned, public list. You can request the data processing agreement.
Let's talk about your website.
In the demo, Michael shows you how searchVIU works. We use your website and a demo project for this.
- Request in three short steps
- Quick alignment on crawler access, NDA and Search Console
- Demo with your website and the demo project
- Start planned and supported together
Which website is it about?
Please enter your website and your business email.We need your business email for the demo. Without a company address, you can use our free tools instead.
What do you need?
Select as many as you like.
Who are you?
We only use your details for the demo. More in our privacy policy.
We need your business email for the demo.Please check your email address.Please enter your website.Please check your website address.The spam check could not be loaded. Please email us at info@searchviu.com.That didn't work. Please email us at info@searchviu.com.
Thanks! Now pick a time.
The calendar shows the open slots for your call with Michael.