Where your data lives
- Your contracts are stored in Supabase, region eu-west-1 (Frankfurt, Germany), GDPR-compliant.
- Hosting and CDN run on the European Vercel Edge Network — no unnecessary transfers outside the EU.
Data in the European Union
Your contracts, safe in Europe
European infrastructure, end-to-end encryption and cryptographic traceability.
How we protect your data
- In transit: TLS 1.3 on all client-server communications.
- At rest: AES-256 over the database.
- Encryption keys are managed by Supabase Vault, separate from the data.
Contract verification
- Each contract generates a unique digital fingerprint (SHA-256 hash). If anyone changes a comma, the fingerprint changes and verification fails.
- Each PDF includes a QR code linking to a public page where anyone can confirm the document integrity.
GDPR compliance
- You are the data controller of the contracts you create. Runican acts as data processor.
- A Data Processing Agreement (DPA) is available for Team plan customers.
- You can exercise your rights (access, rectification, erasure, portability) by emailing privacidad@runican.com.
Backups
- Automatic daily backups managed by Supabase with 30-day retention.
- Backups are encrypted with the same AES-256 policy as the database.
Subprocessors
External services with necessary data access.
Questions about security or need a DPA?
seguridad@runican.com