d8a .tech

Resources / Trust

Trust and security

What we can show you, stated plainly. Everything on this page can be backed with documents on request.

Where your data lives

d8a.tech EU cloud

  • Our core data service runs on EU-only subprocessors.
  • Send data to your own BigQuery or ClickHouse, or let us host the database for you.
  • Free tiers for evaluation; Enterprise for production.

Self-hosted in your infrastructure

  • Run the MIT-licensed code in your cloud or on-premises.
  • Air-gapped mode with telemetry and remote data refreshes disabled.
  • Maintenance, SLAs and support available.
Self-hosted analytics

Your storage or ours

In our cloud, d8a.tech either forwards your data to storage you own, such as your BigQuery project or ClickHouse cluster, or stores it in a ClickHouse database we host for you in the EU. In the first case we don't keep your clickstream data. In the second, we store it on your behalf. Self-hosted deployments never send data to us.

Subprocessors

The core d8a.tech data service runs on EU-only subprocessors. Payments, website hosting and back-office operations may use providers outside the EU; they are not part of the core data service. See our privacy policy, or ask us for the current list of core subprocessors.

Open source

The d8a.tech pipeline is MIT-licensed and public. Your team and your auditors can read every line before trusting it.

d8a-tech/d8a on GitHub

Regulated deployments

  • We sign BAAs for HIPAA.
  • We run live deployments in healthcare and government.
  • Self-hosted deployments can run in air-gapped mode, with maintenance, SLAs and support available.

Documents on request

  • Pentest summary
  • Security documentation
  • Business Associate Agreement (BAA) for HIPAA
  • Data Processing Agreement (DPA)

Ask through the contact form, or write to security@d8a.tech. Our Data Protection Officer is at dpo@d8a.tech.

Request documents.

Talk to us about your security review, a DPA or a BAA. We usually reply within one business day.