Compliance & Data Residency - Sanas Developer Hub

Certifications

ISO 27001:2022

Information security management system certified.

SOC 2 Type II

SSAE-21 SOC 2 Type 2 attested.

HIPAA

Compliant. BAA available for enterprise customers.

GDPR

Compliant with EU, UK, and Swiss data protection regulations.

PCI DSS

Payment card industry data security standard compliant.

CCPA

California Consumer Privacy Act compliant.

Data Handling

Real-Time Processing

Audio is processed in real-time and not stored on Sanas Cloud.

No Data Retention

User call audio is never sent to Sanas servers for storage.

Self-Hosted Option

Self-hosted deployments keep all data within your infrastructure.

For technical security details (encryption, access control, infrastructure), see Security.

Data Residency

Deployment Data Location Audio Leaves Your Infra?
Sanas Cloud — US East AWS us-east-2 (Ohio, USA) Yes
Sanas Cloud — South Asia AWS ap-south-1 (Mumbai, India) Yes
Self-Hosted Your own servers Never

More regions coming soon.

Sub-Processors

Sub-Processor Purpose Location
Amazon Web Services Hosting production environment US
Microsoft Azure CDN provider US
ClickHouse Hosting telemetry database US

Customers receive 30 days’ notice before new sub-processors are authorized.

Data Retention

Your Rights

You can request access, correction, deletion, restriction, or portability of your personal data at any time. Contact: privacy@sanas.ai

Learn More

[Trust Vault

Full security posture and compliance documentation.](https://trust.sanas.ai/)

[Data Processing Agreement

Complete data processing terms and commitments.](/content/data-processing-agreement/index.html)

[Privacy Policy

How Sanas collects, uses, and protects your information.](/content/privacy-policy/index.html)

[Data Security FAQ

Frequently asked questions about data security and privacy.](https://help.sanas.ai/docs/faqs-data-security-and-privacy)