​
Data Residency Options

We know how important it is for you to have control over where your data lives. With Kombo, you can choose to host your data either in the EU or the US. Just let us know your preference during onboarding, and we’ll take care of the rest.

​
Available Regions

  • EU: Available at api.kombo.dev
  • US: Available at api.us.kombo.dev
Resources are always region-specific and can’t be shared across regions. This means your API keys and other resources will be unique to the region you select.

​
Compliance and Security

We take security and compliance seriously at Kombo. Here’s a quick overview of what we do to keep your data safe and sound.

​
Certifications

  • ISO Certified
  • SOC 2 Certified
  • GDPR Compliant

​
Data Security

  • Encryption: All data is encrypted at rest.
  • PII Handling: PII data of end-customers will never be stored outside the selected region.
  • Regular Audits and Penetration Testing: We undergo regular penetration testing and audits to ensure our security measures are always up to date and effective.
For more details on our security practices, feel free to visit our Security Center.

​
Global Data Handling

Kombo’s architecture ensures that your data is handled efficiently and securely, no matter where it’s processed.

​
Data Processing

Kombo operates independent deployments in each available region to ensure data residency and compliance. Regional resources are isolated from each other and can’t be accessed by services in other regions.
  • Regional Resources: All data processing is managed by regional APIs, databases, and sync-workers based on your tenant settings.
  • Global Dashboard: Our global dashboard frontend connects to the appropriate datacenter depending on your tenant setting, ensuring seamless data access and management.
Example: Your tenant is configured to run in the EU. If you try to call the US API, you’ll get an authentication error.

​
Additional Information

If you have any specific questions or need more detailed information, feel free to reach out to our team. For more on our security practices, check out our Security Center.