Everything your procurement team will ask
Data residency by region. Live status. Sub-processors list. Vulnerability disclosure. The full set of policies. No login required, no NDA to read this page.
System status
99.95% uptime SLA on Pro and Enterprise. Live status board updated every 60 seconds.
Data residency
Your data is hosted in the DigitalOcean region closest to your billing country by default. Enterprise tenants can pin to a specific region under contract.
India
Bangalore (BLR1)
Default for IN-billed tenants
Europe
Frankfurt (FRA1)
Default for EU-billed tenants
North America
New York (NYC3)
Default for US/CA-billed tenants
Other regions
Closest available
Chosen at sign-up; pinnable on Enterprise
Sub-processors
Vendors with access to customer data, along with what they do, where data sits, and their DPA. We notify all customers 30 days before any new sub-processor is added.
| Sub-processor | Purpose | Region | DPA |
|---|---|---|---|
| DigitalOcean | Compute, managed Postgres, object storage | Per tenant region | View DPA |
| Cloudflare | CDN + DDoS protection (marketing site only) | Global edge | View DPA |
| Resend | Transactional email (verification, OTP, notifications) | EU + US | View DPA |
| Sentry | Application error tracking (self-hosted) | Same region as tenant | Self-hosted, no DPA needed |
| Razorpay | Payments processing (India) | India | View DPA |
| Stripe | Payments processing (US/EU) | US / EU | View DPA |
| Google Workspace | Internal email + docs | EU | View DPA |
Policies & disclosures
The full set of documents your legal team will want to read.
Vulnerability disclosure
Found something? We want to hear from you. Here is what happens when you report a security issue.
- 1Email security@scraplytics.com with details (or use the PGP key below)
- 2You will hear back within 48 hours acknowledging receipt
- 3A status update lands every 7 days until resolution
- 4Critical issues page our security on-call within 15 minutes
security@scraplytics.com
For sensitive reports, encrypt with our PGP key (fingerprint FE2D 3C92 9E4B 7A85 D6F1 8C25 4D11 9A67 B388 0E4F).
Need our Trust Report?
SOC 2 in-progress report, pen-test summary, compliance matrix - available under NDA from your account team.
Request the Trust Report