Refine Legal & Trust Center

A transparent overview of Refine’s compliance standards, data protection commitments, security posture, and subprocessors.

Compliance Frameworks

GDPR

• Compliant

EU AI Act

• Compliant

ISO 27001

• Ongoing certification process

SOC 2 Type II

• Ongoing certification process

Subprocessors

Refine works with a small number of trusted subprocessors to ensure secure, fast, and reliable service delivery. Each provider is covered by a GDPR-compliant Data Processing Agreement (DPA).

Google Cloud Platform (GCP)

• Infrastructure & Hosting

EU (Frankfurt)

Primary hosting for compute, storage, and database services.

DPA Source →

Vercel

• Frontend Hosting / CDN

Global

Provides fast, global content delivery and secure frontend hosting.

DPA Source →

Resend

• Transactional Email Service

EU

Sends password resets, verification emails, and essential platform notifications.

DPA Source →

Deepgram

• Text-to-Speech AI

• Speech-to-Text AI

EU / USA depending on configuration

Temporary audio transcription (no storage).

DPA Source →

Amazon Web Services (AWS)

• Infrastructure & Backup Services

EU (Frankfurt) / Global depending on configuration

Provides scalable cloud infrastructure and secure backup storage.

DPA Source →

ElevenLabs

• Text-to-Speech AI

• Speech-to-Text AI

EU / Global depending on configuration

Generates voice output from text (no storage).

DPA Source →

Documentation