Compliance — Data location & retention

All data is stored in the United States, encrypted in transit and at rest. There is no choice of region and no customer-managed encryption keys. Retention, deletion timelines and backup windows are set out in the Privacy Policy; export and account deletion are both self-service rather than a support request.