Navor
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted This listing EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Navor Sàrl (UID CHE-210.561.933), Avenue Warnery 9, 1007 Lausanne, Switzerland
Swiss AI bookkeeping for SMEs and fiduciaries (Navor Sàrl, Lausanne, 2025); Swiss data residency claimed, no public DPA or sub-processor list.
Navor offers EU hosting in Switzerland, but a US parent or sub-processor leaves material CLOUD Act exposure. It is listed under Accounting.
Assessment notes
Navor Sàrl (Lausanne, UID CHE-210.561.933, registered August 2025) is Swiss-incorporated and founder-held, and the vendor itself asked this directory to record its transparency gaps rather than infer around them. Those gaps are the determining factor: no public DPA, no sub-processor register, no privacy policy at any discoverable URL, and no standalone hosting-region declaration beyond a single homepage line. The seven-paragraph terms page is the only legal document published. Against that, the observable stack is US-owned at several layers: both navor.ai and app.navor.ai answer from Google Cloud (Google Frontend, googleusercontent.com reverse DNS), identity runs on Clerk (US) fronted by Cloudflare, billing on Stripe (US), documents can be submitted through WhatsApp (Meta, US), and the product is explicitly designed to be driven from ChatGPT, Claude and Gemini, all US-owned assistants. The AI provider is never named, and the published zero retention promise is a retention commitment, not a jurisdiction one, so US processing cannot be excluded. Swiss ownership keeps ownership_signal: other, but the disclosure vacuum plus a mostly US substrate puts CLOUD Act exposure at material and the score at 2/5.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned EU-incorporated and EU-controlled; no significant US ownership.
-
European This listing Swiss/EEA-owned, with no significant US ownership; treated as European.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
- Sub-processors
- — not disclosed
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: No
-
Public DPA: No
-
Sub-processors disclosed: No
-
Open-source clients: No
-
Third-party certification: No
Jump to
About Navor
Navor is an AI bookkeeping platform for Swiss SMEs and fiduciaries, operated by Navor Sàrl, a Lausanne limited liability company entered in the Swiss commercial register in August 2025 (UID CHE-210.561.933, bylaws dated 15 July 2025). It is founder-run: Blend Morina (data and business), Simone Roznowicz (software engineering) and Davide Roznowicz (AI and research), with Pascal Eichenberger as a fourth registered partner.
The product takes in invoices, receipts and bank statements through the web app, by email or over WhatsApp, extracts the accounting facts, proposes reconciliations and journal entries, and produces Swiss VAT statements and financial reports. Bank connectivity runs over the Swiss bLink hub, invoicing supports Swiss QR-bills including QR-IBAN and QR references, accounts can be held in several currencies, and fiduciary access is included at no extra charge on every plan. The design point is that Navor prepares work and a human approves it: actions carry a prepared, requested, approved or denied state with the actor recorded, which gives the audit trail fiduciaries need. Distribution is unusual for the category, since the same accounting agent is meant to be driven from ChatGPT, Claude, Gemini and WhatsApp rather than only from Navor's own interface. Pricing starts at CHF 59.90 per month for the Starter plan (up to 50 transactions), after a 14-day trial, with a lower monthly rate on annual billing; the app is localised in English, German, French and Italian. Navor also describes an exploratory collaboration with two adult-protection (APEA) teams in the Canton of Valais on accounting dossiers, presented as a collaboration being shaped rather than a signed production deployment.
For a sovereignty audit this is an honest but thinly documented listing. The vendor states that financial data is stored exclusively in certified data centres in Switzerland and that AI processing runs with zero retention, and it disclosed to us up front that it publishes no DPA, no sub-processor register and no standalone hosting-region declaration. Those gaps are recorded as gaps. What is independently observable points the other way: the web app answers from Google Cloud, authentication runs on Clerk in the United States, billing on Stripe, and the headline integrations are three US-owned AI assistants, so CLOUD Act exposure is recorded as Material. Zero retention constrains what a model keeps, not which jurisdiction processes it.
Sub-processor map · not disclosed
Frameworks & certifications · none listed
Capability matrix
Table 1Capabilities of Navor
Integration & access
Compliance & governance
Pricing & tiers
Public documents
-
missingData Processing Addendum (DPA)— missing
-
missingSub-processors list— missing
-
OpenTerms of Servicenavor.ai/terms-and-conditions…
Alternatives in this category
-
Norway · €9/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Norway · €20/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Germany · €7.90/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
|
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€9/mo |
|
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€20/mo |
|
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€7.90/mo |