Data in the European Union

Your contracts, safe in Europe

Contracts stored in Ireland, encryption in transit and at rest, and cryptographic traceability. Usage analytics is processed in the United States.

Where your data lives

Your contracts are stored in Supabase, in the EU: region eu-west-1 (Ireland).
The delivery network serves from the point closest to each visitor (from Spain, Paris).
But pages are executed on Vercel machines in the United States: your data passes through there each time a page is generated, even though it rests in Ireland.
Product analytics (PostHog) and email delivery (Resend) process data in the United States, under standard contractual clauses. Error diagnostics (Sentry) stays within the European Union.

In transit: TLS 1.3 on all client-server communications.
At rest: AES-256 over the database.
The keys for encryption at rest are managed by the infrastructure provider (AWS), not by Runican: nobody at Runican can read the disks.

Each contract generates a unique digital fingerprint (SHA-256 hash). If anyone changes a comma, the fingerprint changes and verification fails.
Each PDF includes a QR code linking to a public page where anyone can confirm the document integrity.

You are the data controller of the contracts you create. Runican acts as data processor.
You can exercise your rights (access, rectification, erasure, portability) by emailing privacidad@runican.com.

There are no automatic database backups today: the current infrastructure plan does not include them.
Your contracts can be downloaded as PDF at any time, and the PDF carries its hash so it can be verified later.

External services with necessary data access.

Service	Purpose	Region	Privacy
Supabase	Database and authentication	eu-west-1 Ireland 🇮🇪	Policy
Vercel	Hosting and CDN	Edge in Paris 🇫🇷 · compute in the US 🇺🇸	Policy
Resend	Transactional email delivery	Ireland 🇮🇪	Policy
Stripe	Payment processing	EU/US	Policy

Questions about security?