Security

Sub-processors

Note

Here is the full list of sub-processors at 21RISK. A sub-processor is a third-party data processor engaged by 21RISK, who agrees to receive data from 21RISK in accordance with instructions given by 21RISK.

Name Activities Country Notes Compliance
MongoDB Atlas Database as a Service USA Data is stored in AWS eu-west-1. Read more here SOC2 Type 2
Vercel Platform for applications USA Vercel is where our frontend and backend is hosted, running serverless and edge functions. Read more here SOC2 Type 2
WorkOS Auth services USA Responsible for passwordless authenticaiton, SSO and AD sync. Read more here SOC2 Type 2
Doppler Secrets service USA Secrets management. Read more here SOC2 Type 2
Uploadcare Assets services Canada Responsible for assets at 21RISK like images, files and video. Read more here SOC2 Type 2
Pusher Realtime cloud services Holland We use pusher to enable real-time collaboration in our application. SO/IEC 27001:2013
Cloudflare Cloud services USA We use Cloudflare to manage DNS configuration. SOC2 Type 2, ISO27001
Sentry Cloud services USA Sentry is used for error handling and monitoring. SOC2, ISO27001
PDF Shift Generate PDF's France When users export pages as PDF's in 21RISK, it's powered by PDF Shift
Sendgrid Email service USA Sendgrid is used to send transactional and marketing emails. SOC2 Type 2

Last updated November 22nd, 2023