Refine Legal & Trust Center

A transparent overview of Refine’s compliance standards, data protection commitments, security posture, and subprocessors.

Compliance Frameworks

GDPR

• Compliant

EU AI Act

• Compliant

ISO 27001

• Ongoing certification process

SOC 2 Type II

• Ongoing certification process

Subprocessors

Refine works with a small number of trusted subprocessors to ensure secure, fast, and reliable service delivery. Each provider is covered by a GDPR-compliant Data Processing Agreement (DPA).

Google Cloud Platform (GCP)

• Infrastructure & Hosting

EU (Frankfurt)

Primary hosting for compute, storage, and database services.

DPA Source →

Vercel

• Frontend Hosting / CDN

Global

Provides fast, global content delivery and secure frontend hosting.

DPA Source →

Resend

• Transactional Email Service

USA

Sends password resets, verification emails, and essential platform notifications.

DPA Source →

Deepgram

• Speech-to-Text AI

USA

Temporary audio transcription (no storage).

DPA Source →

Documentation