Infrastructure

Data Residency & Hosting

Where your data lives and how it's protected

Last Updated: February 2026

Infrastructure Overview

WinIQ is built on enterprise-grade cloud infrastructure designed for security, reliability, and compliance. We offer flexible data residency options to meet your regulatory requirements.

99.9%
Uptime SLA
2
Data Regions
AES-256
Encryption
Daily
Backups

Available Data Regions

πŸ‡ΊπŸ‡Έ

United States

Default Region
Primary Location US East (Virginia)
Backup Location US West (Oregon)
Provider AWS (via Supabase)
Availability All Plans
πŸ‡ͺπŸ‡Ί

European Union

Enterprise
Primary Location EU West (Frankfurt)
Backup Location EU West (Ireland)
Provider AWS (via Supabase)
Availability Enterprise Plan
GDPR Compliance: EU data residency ensures all customer data (including database, files, and backups) remains within the European Economic Area. AI processing can also be configured to use EU-based endpoints via Azure OpenAI.

Data Flow Architecture

Application Layer

Web Application
Vercel Edge Network
Global CDN with regional edge servers
API Gateway
Cloudflare
DDoS protection, WAF, rate limiting
SSL/TLS
TLS 1.3
End-to-end encryption in transit

Data Layer

Primary Database
PostgreSQL (Supabase)
Row-level security, AES-256 encryption
File Storage
Supabase Storage (S3)
Encrypted at rest, signed URLs
Backups
Daily automated
Point-in-time recovery, 30-day retention

AI Processing Layer

Default Configuration
OpenAI / Anthropic APIs (US)
Zero-retention API agreements
EU Configuration
Azure OpenAI (EU West)
Enterprise plan, EU data processing

Infrastructure Security

Encryption at Rest
AES-256-GCM encryption for all stored data
Encryption in Transit
TLS 1.3 for all API and data transfers
Network Isolation
VPC with private subnets, no public database access
DDoS Protection
Cloudflare enterprise-grade protection
Automated Backups
Daily backups with 30-day retention, PITR
Access Controls
Role-based access, MFA for all admin access

Need EU Data Residency?

Contact our team to discuss Enterprise plans with EU data residency, custom deployment options, or specific compliance requirements.