Where your data lives

Your data is stored in the United States. This page names the region and each provider that touches it, so a reviewer can check the list against the Subprocessors page and the Data Processing Agreement.

The database and your files

Your Data Room, the values Ressura extracts, your findings and your account details live in a Supabase project in Amazon Web Services region us-east-1, which Amazon calls US East (Northern Virginia). Sign-in runs there too. Production has its own project, separate from the one used for testing, so test data and customer data never share a database.

The app and the site

Vercel serves the app at ressura.com/app and the site at ressura.com, from the United States. Vercel sees your requests as they pass through and keeps operational logs about them. It does not hold your Data Room.

Model calls

When a model reads one of your documents, the call goes through Vercel's AI Gateway, in the United States, with zero data retention. The model provider returns its answer and keeps no copy of your document or of the answer. No provider may use your data to train a model. The Subprocessors page is the list counsel keeps of the providers under contract, and the DPA sets out how you are told when one is added.

Backups

Ressura keeps regular backups so the Service can be restored after a failure. Backups are encrypted like the live data. After a company leaves, its backup copies are deleted within 90 days; Retention and deletion has the detail.

Outside the United States

Ressura is a United States company and processes data there. If you bring personal data from the EEA, the UK or Switzerland, the transfer relies on safeguards such as the Standard Contractual Clauses, as the Privacy Policy and the DPA set out.

Read next

How your data is handled follows a document from upload to finding. Who can see what covers people rather than places.