Security
Sub-processors
Note
Here is the full list of sub-processors at 21RISK. A sub-processor is a third-party data processor engaged by 21RISK, who agrees to receive data from 21RISK in accordance with instructions given by 21RISK.
| Name | Activities | Country | Notes | Compliance |
|---|---|---|---|---|
| Planetscale | Database as a Service | USA | Data is stored in AWS eu-central-1. Read more here | SOC2 Type 2 |
| Vercel | Platform for applications | USA | Vercel is where our frontend and backend is hosted, running serverless and edge functions. Read more here | SOC2 Type 2 |
| SSOReady | Auth services | USA | Responsible for passwordless authenticaiton, SSO and AD sync. Read more here | SOC2 Type 2 |
| Doppler | Secrets service | USA | Secrets management. Read more here | SOC2 Type 2 |
| Uploadcare | Assets services | Canada | Responsible for assets at 21RISK like images, files and video. Read more here | SOC2 Type 2 |
| Pusher | Realtime cloud services | Holland | We use pusher to enable real-time collaboration in our application. | SO/IEC 27001:2013 |
| Cloudflare | Cloud services | USA | We use Cloudflare to manage DNS configuration & backups. | SOC2 Type 2, ISO27001 |
| Sentry | Cloud services | USA | Sentry is used for error handling and monitoring. | SOC2, ISO27001 |
| PDF Shift | Generate PDF's | France | When users export pages as PDF's in 21RISK, it's powered by PDF Shift | |
| Sendgrid | Email service | USA | Sendgrid is used to send transactional and marketing emails. | SOC2 Type 2 |
Last updated August 28, 2025