Standard
Everything on this page as it is today: records and server functions in Sydney, and model providers overseas.
Draft · checked 1 November 2026
Where your data goes
Where assembl and DO run, which providers see your information, and what we have checked. Each row says whether we have verified it.
- Your stored records are in Sydney, Australia. That covers your account, sign-in and what DO keeps.
- The servers that handle each request are in Sydney too. They moved there from Washington, D.C. on 1 November 2026.
- When DO drafts, reads or listens, your words go to an overseas provider. That is OpenAI, Anthropic, Google or TypeSafe. Most do not say which country.
- Nothing assembl runs is hosted in New Zealand today. A New Zealand option is proposed, not built.
Inventory
What runs where
7 of 22 rows are verified against a live setting or the provider’s own documentation. The rest are honest gaps.
| What it does | Who runs it | Where | What passes through | Personal information | Truth label |
|---|---|---|---|---|---|
| Every DO request and website form | Vercel (server functions) | Sydney, AustraliaMoved from Washington, D.C. to Sydney on 1 November 2026, next to the database. Vercel has no New Zealand location. | What you type, paste, photograph or say to DO; your account email | Yes | Verified |
| Scheduled DO jobs | Vercel (cron) | Sydney, Australia | Whatever the job reads from your DO records | Yes | Verified |
| Stored records and sign-in | Supabase | Sydney, AustraliaSupabase has no New Zealand location. Sydney is its closest. | Account email, hashed password, your DO agents, receipts and job history, enquiries, conversations you choose to keep | Yes | Verified |
| Database backups | Supabase | Not stated | A copy of the stored records | Yes | Not yet verified |
| Website pages | Vercel (content network) | The nearest Vercel location. None is in New Zealand.We know there is no New Zealand location. We have not confirmed which one serves New Zealand visitors. | Your IP address and the page you asked for | Yes (IP address) | Not yet verified |
| Drafting and planning in your personal DO | OpenAI | USA by defaultWe have not checked whether a regional setting is turned on for our OpenAI account. | Your request and notes | Yes | Not yet verified |
| Checking a draft before you see it | TypeSafe | Not stated | Your request and notes (up to 32 KB) | Yes | Not yet verified |
| The guide on assembl.co.nz | Anthropic (Claude) | Any country Anthropic chooses. Stored data is in the USA.Anthropic offers “global” (the default) or “US only”. There is no Australian or New Zealand option. | Your questions. We keep the chat in Sydney with a scrambled version of your IP address. | Possibly | Verified |
| Reading photos you share with DO | OpenAI first; Anthropic or Google if it is unavailable | USA or not stated | The photo and your question | Yes | Not yet verified |
| Reading a bill | Google (Gemini) | Not stated by Google | The bill image: names, addresses, account numbers | Yes | Not yet verified |
| Talking to DO | Google (Gemini) or OpenAI | Not stated | Your voice. With Google, your browser connects straight to Google using a short-lived pass. | Yes | Not yet verified |
| Meeting transcripts | Deepgram | Not stated (global service)Deepgram offers an Australian service. We do not use it yet. | The voices of everyone in the meeting | Yes, including people who are not DO users | Not yet verified |
| Sending enquiry replies by email | Brevo | France, Germany and Belgium | Recipient’s email address, subject and message | Yes | Verified |
| Reading your Gmail, only if you connect it | Not stated | The emails DO is asked to read | Yes | Not yet verified | |
| Checking when you are free, only if you connect your calendar | Google Calendar | Not stated | Your busy times | Yes | Not yet verified |
| Paying for DO | Stripe | USA | Name, email, payment details (Stripe handles the card, not us) | Yes | Not yet verified |
| Server logs | Vercel | Not stated | Request details. We do not use a separate error-tracking service. | Possibly | Not yet verified |
| Visitor analytics | None | — | We do not load analytics or advertising trackers. | No | Verified |
| Our domain name | Cloudflare | Global | Look-ups of assembl.co.nz | Generally no | Not yet verified |
| Our own mailbox (assembl@, privacy@) | Google Workspace | Not stated | Anything you email us | Yes | Not yet verified |
| assembl lab: the agent-ready cars connector and live feeds | Vercel (server functions) | Sydney, Australia | Search criteria and New Zealand place names. The cars connector asks for no contact details and its bookings are simulated. | No, by design | Verified |
| assembl lab: the “ask” explainers | Anthropic (Claude) | Any country Anthropic chooses | Your question. Your IP address may be counted for 25 hours to limit use. | Possibly | Not yet verified |
Some features only run when they are switched on for your account. We could not confirm which are switched on in production for this draft, so each row shows where data would go when the feature is used.
Authority
What agents can do, and who says yes
Every DO agent has three lists: what it can do without asking, what it must ask before doing, and what it must never do. The approver is the person who owns the DO account.
- 01
Look and prepare
CanRead what you share with it and public New Zealand sources. Draft, sort, summarise and plan.
ApprovesNo approval needed. Nothing leaves DO.
- 02
Ask first
CanBuy, book, send, post, submit, pay or sign.
ApprovesYou, every time. Our server enforces this list. The model cannot move an action out of it.
- 03
Extra checks
CanPay, buy, sign or submit.
ApprovesA four-step chain: draft, sceptic check, decision summary, then your yes.
- 04
Never
CanAnything on the agent’s “never” list.
ApprovesNobody. DO will not do it.
In the public preview, outside actions are switched off. Team approval roles for business workspaces are not yet verified for this page.
Records
What we log
- DO receipts and job history
- What each job did, when, and its outcome. Stored in Sydney.
- Conversations you choose to keep
- Kept for 30 days after the last message. You can forget one at any time. Not kept unless you ask.
- Which model handled a request
- A record of the model used, stored in Sydney.
- The guide on assembl.co.nz
- Each message and reply, with a scrambled version of your IP address, stored in Sydney. We have not yet set how long we keep these.
- Server logs
- Request details held by Vercel.
Privacy Act 2020
Your business stays responsible
When assembl holds or processes information only on your business’s behalf, the Privacy Act treats your business as holding it (section 11). Your business stays responsible for that information, and we act on your instructions.
Since 1 May 2026, Information Privacy Principle 3A means that when you collect personal information about someone from another source, you must take reasonable steps to tell them, unless an exception applies. DO can do that kind of collecting: meeting transcripts include other people’s voices, read emails name their senders, and enquiries carry your customers’ details.
Before you switch those features on, decide how you will tell the people involved. We can help you word the notice.
Māori data
Commitments in progress
We have not yet put Māori data governance in place. These are proposals, not practice:
- ProposedTreat information about Māori people, whānau, hapū, iwi and Māori organisations as Māori data, governed collectively as well as individually.
- ProposedSeek advice from Māori data governance practitioners before offering DO for Māori data, rather than relying on an individual consent tick-box.
- ProposedOffer New Zealand hosting for Māori data once the New Zealand option exists.
- ProposedReport to affected groups on where their data goes, in this same plain form.
Leaving
Exit and export
There is no self-serve export button yet. Email privacy@assembl.co.nz and we will send you what we hold about you or your business. The Privacy Act gives us 20 working days to respond to a request for your personal information.
You can forget a kept DO conversation at any time. To close your account and have your records deleted, email us. If the law requires us to keep something, we will tell you what and why.
Hosting options
Three ways to run DO
Questions
Ask us
Email privacy@assembl.co.nz. Our full privacy policy explains your rights. If you are not happy with our answer, you can contact the Office of the Privacy Commissioner.
assembl NZ Limited · Tāmaki Makaurau · this page was last checked 1 November 2026