Note

Here is the full list of sub-processors at 21RISK. A sub-processor is a third-party data processor engaged by 21RISK, who agrees to receive data from 21RISK in accordance with instructions given by 21RISK.

Name	Activities	Country	Notes	Compliance
Planetscale	Database as a Service	USA	Data is stored in AWS eu-central-1. Read more here	SOC2 Type 2
Vercel	Platform for applications	USA	Vercel is where our frontend and backend is hosted, running serverless and edge functions. Read more here	SOC2 Type 2
Doppler	Secrets service	USA	Secrets management. Read more here	SOC2 Type 2
Uploadcare	Assets services	Canada	Stored and served the files users uploaded until October 2026. It no longer receives files, and holds copies of the older files only until we close our Uploadcare projects, when they will be deleted. Read more here	SOC2 Type 2
Pusher	Realtime cloud services	Holland	We use pusher to enable real-time collaboration in our application.	SO/IEC 27001:2013
Cloudflare	Cloud services	USA	We use Cloudflare to manage DNS configuration & backups, and to store and serve all files: the files users upload, and 21RISK's public files (website, documentation and product update images), from Cloudflare R2 in the EU. Read more here	SOC2 Type 2, ISO27001
Google Cloud	Backup storage	USA	Keeps the off-site backup of the files users upload, in a Cloud Storage bucket in the EU. Read more here	SOC2 Type 2, ISO27001
Sentry	Cloud services	USA	Sentry is used for error handling and monitoring.	SOC2, ISO27001
PDF Shift	Generate PDF's	France	When users export pages as PDF's in 21RISK, it's powered by PDF Shift
Lettermint	Email service	Netherlands	Lettermint is used to send transactional emails.	GDPR

Last updated October 16th, 2026