Data residency

Renewly is a dual-region service. You choose your region at signup and your contracts, account data, and audit logs stay in that region for the life of the workspace. This article is the plain-language version of /trust - what lives where, what crosses region, and how to opt out of the one stage that does.

Choosing your region

At signup time you pick a region. Today there are two:

European Union - storage on Supabase eu-central-1 (AWS Frankfurt), primary extraction on Google Vertex in the EU region.
United States - storage on Supabase us-east-1 (AWS N. Virginia), primary extraction on Google Vertex in the US region.

Your region is set when you sign up. It cannot be changed from the in-app settings UI - to migrate a workspace between regions, contact support and operations runs the cutover process.

Why does Renewly let me pick a region?

EU customers under GDPR (and many regulated industries on either side of the Atlantic) need their contract data to stay in a specific region. We run two physically separate Supabase projects - one in Frankfurt, one in N. Virginia - and your data only ever lives in the one you chose.

What stays in your region

The following data lives only in your selected region:

Uploaded contract PDFs (in Supabase Storage)
Extracted fields and metadata
Your account profile and organization records
Audit logs (retained for 3 years)
The in-region LLM extraction pass (Google Vertex)
The LLM validation pass (Claude via AWS Bedrock)

What crosses region

No stage of the extraction pipeline leaves your region. PDF reading, the field-extraction pass (Google Vertex) and the validation pass (Claude on AWS Bedrock) all run in the region you chose at signup. The PDF text-extraction stage that previously crossed region has been retired, so there is no longer a cross-region stage to opt out of.

If your compliance program requires the validation pass to be switched off as well, contact support at security@renewly.gg and we will set the per-org flag on your workspace. Extractions still run - they just skip that pass, with slightly lower accuracy on the primary pass alone.

Operational logs

A small number of infrastructure vendors (hosting, error reporting, job orchestration, rate limiting) are single-instance services. Their operational logs - request metadata, IDs, region tags - may transit outside your primary region even though contract content itself does not. Contract content is never written to operational logs. The full list lives on /trust.

Data export and deletion

Under GDPR Article 15 you can export everything Renewly holds about you from your account settings. Account deletion is honoured with a 30-day grace period; backups are purged after 30 days.

More detail

/trust - the canonical map of regions, sub-processors, and operational vendors.
/security - the full security posture.
Privacy Policy - the legal text, including cross-border transfer mechanisms (SCCs / UK addendum).