Every workspace has a home region, and on Growth and Enterprise you choose it. Your data is stored at rest there, our production systems process it there, and it's encrypted with a key that belongs to your workspace.
Workspace data is stored at rest only in your workspace's region and processed there by our production systems: events, user and company profiles, session replays, bug reports and attachments, survey answers, email content, and the logs and backups that contain any of it.
Data leaves the region only in a short, documented list of cases, such as sending it to an integration you connect yourself.
On Growth and Enterprise, choose the region your workspace is hosted in, or move it later. A move takes up to 24 hours, and your workspace keeps working in its current region until the move completes.
Residency applies to your workspace, not to where your users are: people anywhere can use your app, and their data is stored in your workspace's region.
Your region
Growth and Enterprise
Moving regions
Up to 24 hours
Session replay masks text and form input in the browser before anything is sent. Autocapture records that someone typed, not what they typed. Network bodies are kept only for URLs you allow, and sensitive headers are stripped.
You can delete a person's data through the API when they ask, and recordings expire at the end of your plan's retention period.
All traffic uses TLS, and data is encrypted at rest. On top of that, each workspace has its own encryption key, so one customer's data is never readable with another's key.
We don't claim certifications we don't hold. If your review needs specific documents, ask us what we can provide.