> ## Documentation Index
> Fetch the complete documentation index at: https://developer.sanas.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Compliance & Data Residency

Sanas maintains enterprise-grade compliance standards and gives you full control over where your data is processed and stored.

## Certifications

<CardGroup cols={3}>
  <Card icon="certificate" title="ISO 27001:2022">
    Information security management system certified.
  </Card>

  <Card icon="shield" title="SOC 2 Type II">
    SSAE-21 SOC 2 Type 2 attested.
  </Card>

  <Card icon="lock" title="HIPAA">
    Compliant. BAA available for enterprise customers.
  </Card>

  <Card icon="globe" title="GDPR">
    Compliant with EU, UK, and Swiss data protection regulations.
  </Card>

  <Card icon="credit-card" title="PCI DSS">
    Payment card industry data security standard compliant.
  </Card>

  <Card icon="flag" title="CCPA">
    California Consumer Privacy Act compliant.
  </Card>
</CardGroup>

## Data Handling

<CardGroup cols={3}>
  <Card icon="bolt" title="Real-Time Processing">
    Audio is processed in real-time and not stored on Sanas Cloud.
  </Card>

  <Card icon="trash" title="No Data Retention">
    User call audio is never sent to Sanas servers for storage.
  </Card>

  <Card icon="server" title="Self-Hosted Option">
    Self-hosted deployments keep all data within your infrastructure.
  </Card>
</CardGroup>

For technical security details (encryption, access control, infrastructure), see [Security](/Docs/Enterprise/Security).

## Data Residency

| Deployment               | Data Location                    | Audio Leaves Your Infra? |
| ------------------------ | -------------------------------- | ------------------------ |
| Sanas Cloud — US East    | AWS `us-east-2` (Ohio, USA)      | Yes                      |
| Sanas Cloud — South Asia | AWS `ap-south-1` (Mumbai, India) | Yes                      |
| Self-Hosted              | Your own servers                 | Never                    |

<Info>More regions coming soon.</Info>

## Sub-Processors

| Sub-Processor           | Purpose                        | Location |
| ----------------------- | ------------------------------ | -------- |
| **Amazon Web Services** | Hosting production environment | US       |
| **Microsoft Azure**     | CDN provider                   | US       |
| **ClickHouse**          | Hosting telemetry database     | US       |

Customers receive 30 days' notice before new sub-processors are authorized.

## Data Retention

* During agreement: data retained per contract terms
* Post-termination: 30 days to request deletion or return
* Automatic deletion within 6 months after termination
* Backup data deleted within 1 year post-termination

## Your Rights

You can request access, correction, deletion, restriction, or portability of your personal data at any time.

**Contact:** [privacy@sanas.ai](mailto:privacy@sanas.ai)

## Learn More

<CardGroup cols={2}>
  <Card title="Trust Vault" icon="shield" href="https://trust.sanas.ai/">
    Full security posture and compliance documentation.
  </Card>

  <Card title="Data Processing Agreement" icon="file-contract" href="https://www.sanas.ai/data-processing-agreement">
    Complete data processing terms and commitments.
  </Card>

  <Card title="Privacy Policy" icon="user-shield" href="https://www.sanas.ai/privacy-policy">
    How Sanas collects, uses, and protects your information.
  </Card>

  <Card title="Data Security FAQ" icon="circle-question" href="https://help.sanas.ai/docs/faqs-data-security-and-privacy">
    Frequently asked questions about data security and privacy.
  </Card>
</CardGroup>