Var lagrar Wave AI data?
Wave AI lagrar data i: UNITED STATES ONLY, with no EU or Swedish option and no residency control of any kind. All NINE Customer Content subprocessors in Wave's own DPA are US-located: Google LLC (cloud/storage/auth), AssemblyAI (STT), OpenAI (summaries), Turbopuffer (search indexing, "hosted on Google Cloud in the United States"), Recall.ai (meeting bots), Trigger.dev (pipeline), Vercel (web/API hosting), Twilio (call recording), Telnyx (numbers/SMS). Transfers handled contractually via EC SCCs. TLS 1.2+ in transit, AES-256 at rest. Deletion is immediate with no backup-archive retention; server logs 14 days. AI training: excluded on ALL plans (not plan-gated) - EXCEPT the free no-signup web tools, where Wave states "We may then keep a private copy of the audio and transcript to improve Wave's speech recognition.".