Data Residency Statement

1. Summary

Raster & State LLC ("Raster & State", "we"), the operator of the Fjord platform, is operated from the United States and is currently offered only to customers in the United States. Your managed forge data, however, is stored and processed in the region you choose at deploy time: EU Central (Falkenstein), United States, Asia Pacific (Singapore). The contents of your managed Forgejo Instance and its CI Runner VMs are hosted by Hetzner in that chosen region. Your encrypted backups are also hosted by Hetzner, but are currently stored in EU (Helsinki, Finland) regardless of the region you choose; per-region backup storage is being rolled out. A small set of supporting platform vendors process limited data in the United States and the European Union, as set out below.

This statement is the customer-facing source of truth for where Fjord data lives. It is generated from the same sub-processor roster as our Privacy Policy and Data Processing Addendum, so the regions here always match the vendors we actually engage.

2. Where your data is stored, by category

Each category of customer and forge data, the sub-processor that holds it, and the region it is processed in:

• Managed forge (Forgejo) instance and repository contents: Hetzner Online GmbH (Chosen forge region).
• CI Runner VMs and build artifacts: Hetzner Online GmbH (Chosen forge region).
• Encrypted backups (nightly Forgejo dumps): Hetzner Online GmbH (EU (Helsinki, Finland), not yet the chosen forge region).
• DNS, edge TLS, and bot mitigation: Cloudflare, Inc. (US/EU).
• Payment and billing data: Stripe, Inc. (US).
• Transactional email (verification, password reset, receipts): Resend, Inc. (US).
• Product analytics for the Fjord Account platform: PostHog, Inc. (EU).
• Application error reporting: Functional Software, Inc. (dba Sentry) (EU).

Support correspondence sent to [email protected] is handled over email and is not routed through a dedicated third-party help-desk sub-processor.

3. Sub-processors by region

The full sub-processor roster, grouped by the region in which each one processes data. We give customers at least 30 days' notice before adding a new sub-processor to which Customer Data may be exposed.

Chosen forge region

• Hetzner Online GmbH: hosting of managed Instances and CI Runner VMs in the customer-selected forge region, and encrypted backup storage.

US/EU

• Cloudflare, Inc.: DNS, edge TLS, and bot mitigation.

US

• Stripe, Inc.: payment processing.
• Resend, Inc.: transactional email (account verification, password reset, billing receipts).

EU

• PostHog, Inc.: product analytics for the Fjord Account platform. Uptime monitoring is operated in-house.
• Functional Software, Inc. (dba Sentry): application error reporting and monitoring when error reporting is enabled for the Service.

4. Residency commitments and limits

• Chosen primary region for forge data: choose EU Central (Falkenstein), United States, Asia Pacific (Singapore) when you deploy. The contents of your managed Forgejo Instance and its CI Runner VMs stay in the selected Hetzner region. We do not replicate your forge contents to other regions.
• Backups are not yet region-pinned: nightly encrypted backups are retained on a rolling 90-day window and snapshots older than that window are pruned, but they are currently stored with Hetzner in EU (Helsinki, Finland) for every Instance, whichever region the Instance itself runs in. Backups remain encrypted with a key unique to your Instance. We are rolling out per-region backup storage; until then, choosing a non-EU region for your Instance does not keep its backups out of the EU.
• No silent relocation: we do not move Customer Data to a sub-processor or region outside the list above without the sub-processor change notice described in Section 3.
• United States offering only, for now: because the Service is offered only to United States customers today, this statement does not incorporate the EU Standard Contractual Clauses or the UK International Data Transfer Addendum, and the Service is not offered as the basis for processing on behalf of EU/EEA or UK organizations. We plan to extend availability to the European Union and Canada, and will put an appropriate Article 46 transfer mechanism in place before processing personal data subject to the EU or UK GDPR.

5. Questions

For data-residency questions, including advance interest from EU/UK organizations, contact us at [email protected]. The international-processing terms are stated in full in our Data Processing Addendum and Privacy Policy.