Infrastructure & Hosting — Vercel, Inc.
Cloud hosting, CDN, and serverless functions.
RunEnv is deployed on Vercel. Your data may transit through Vercel infrastructure. Vercel stores no secret values — all secrets are encrypted before leaving your browser.
- Data region: United States
- Vercel DPA available on request
Database — Neon / Supabase
PostgreSQL database hosting.
Database-at-rest encryption is enforced. All connections use TLS 1.2+.
- Data region: US East
- Encrypted at rest with AES-256
Transactional Email — Resend
Used for invitation, notification, and account emails.
Only email address and message body are shared with Resend — no secret values or sensitive metadata.
- Data region: United States
Payments & Billing — Paddle
Paddle acts as Merchant of Record for RunEnv subscriptions.
Payment card data is never seen or stored by RunEnv. Paddle handles all PCI-scope data.
- PCI DSS Level 1 compliant (Paddle)
- Data region: varies by customer
Monitoring & Observability — Sentry + Microsoft Clarity
Error monitoring and usage analytics.
Sentry captures crash reports and performance traces. Error traces may include anonymized stack traces and session context.
Microsoft Clarity provides session heatmaps for authenticated, opted-in users. Clarity does not record secrets or sensitive form inputs.
- Data region: United States for both processors
- No secret values are captured by either processor
AI Inference (Optional Features) — Google Gemini API
Used for AI-assisted features such as relationship suggestions and smart tagging.
Only anonymized metadata (e.g. key names, not values) is forwarded to Gemini. Secret values are never included in AI prompts.
- Opt-in only features
- No training on customer data under Google API ToS