Enterprise / Trust Center
Trust, in writing.
Everything procurement and security teams ask for, in one place. Live numbers, audit posture, and downloadable artifacts.
Live
Uptime · 99.97%PIPEDAQuébec Law 25SOC 2 Type II · in progressHIPAA · BAA on requestDocuments & receipts
Pre-built artifacts
PDF
SOC 2 Type II evidence package
Multi-page report covering CC1 / CC6 / CC7 / CC8 + audit event summary. Email it to me and I'll send a sample copy. Customer-scoped reports are available after sign-in.
SLA
Service-level & MSA
Uptime targets, incident response SLAs, service credits, governing law, insurance limits. Lives at one URL — procurement can link straight to it.
MSA
Master Service Agreement template
14-business-day redline window. Governing law: Province of British Columbia, Canada.
DPA
Data Processing Agreement
GDPR Article 28 + Québec Law 25 compliant. Pre-signed; we'll add your details on request.
Who else touches your data
Subprocessor list
Vendor
Region
Purpose
MongoDB Atlas
ca-central-1
Primary database (encrypted at rest)
Resend
United States
Outbound transactional email
Stripe
United States
Payments + subscription billing
OpenAI
United States
LLM inference (BYOK)
Anthropic
United States
LLM inference (BYOK)
Cloudflare
Anycast
CDN + DDoS protection
Render
Oregon, USA
Container hosting
Where your data lives
Data residency options
CA
Canada (ca-central-1)
Montréal, Québec
PIPEDALaw 25HIPAADEFAULT
US
United States (us-east-1)
Northern Virginia
HIPAAFedRAMP
EU
European Union (eu-west-1)
Dublin, Ireland
GDPR
Need anything custom in your contract or DPA? Talk to sales →