Privacy and security

Where are my files stored?

Audio sits in a private Cloudflare R2 bucket in Western North America. The full list of who touches what is in the privacy policy.

Updated 2026-08-08

Audio and the files your clients send go to Cloudflare R2, in a private bucket placed in Cloudflare's Western North America region, which covers the western United States and Canada. The bucket is not public: every read is a signed URL that expires, so nothing is reachable by guessing a path or by keeping an old one.

The application and its database run on Railway in the United States. Payments go through Stripe, email through Resend. The one thing that runs inside the European Union is our product analytics, which receives events like "a version was uploaded" with an account id attached, and never audio, file names, client names or email addresses.

The privacy policy lists every one of those with what it is used for and where it sits, and that table is the version we are bound by; this page is a summary of it. If a client's contract requires storage in a particular country, the honest answer today is that we cannot offer that.

For readers who need the legal basis rather than the address: transfers out of the EEA and UK rely on the EU-US Data Privacy Framework where the provider is certified, and on Standard Contractual Clauses with the UK Addendum elsewhere. The policy sets that out in full.

Nothing is used to train anything, which has its own page.

Not covered here? support@soneam.com.