Frameworks
Compliance framework scope
| Framework | Scope |
|---|---|
| SOC 2 Type II | Security, availability, and confidentiality controls, independently audited annually. |
| ISO 27001 | Information security management system, aligned to ISO 27001 controls. |
| GDPR | Lawful basis documentation, data subject rights process, and DPA availability for EU personal data. |
| CCPA | California Consumer Privacy Act rights and disclosure practices for California residents. |
Documentation
Request compliance documentation
Sub-processors
Sub-processor list
| Sub-processor | Purpose | Location |
|---|---|---|
| Cloud infrastructure provider | Application hosting and data storage | United States |
| Email delivery provider | Transactional and marketing email delivery | United States |
| Analytics provider | Product and website analytics | United States |
| Customer support platform | Support ticketing and communication | United States |
Last updated 2026-07-15
Data residency
Where your data lives
Customer data is hosted in United States-based data centers by default. Region-specific data residency options are available on Enterprise plans — contact your account team for details.
View our Data Processing Agreement →