> For the complete documentation index, see [llms.txt](https://docs.userlane.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.userlane.com/security-and-privacy/hosting-and-certifications.md).
# Hosting and certifications
Where Userlane hosts customer data, which certifications Userlane holds, and how to request evidence.
Userlane runs on Microsoft Azure infrastructure. Customer data is hosted in a dedicated region chosen during account setup, and the hosting commitment is contractually held through the subprocessor list[^1]. Userlane holds ISO/IEC 27001:2022 certification[^2] covering the platform's development, operation, and support.
{% hint style="info" %}
**Scope.** This article covers the hosting infrastructure and security certifications for the Userlane platform. Contract-level commitments, including service level agreements and data processing terms, are in the binding agreements. Detailed security controls and penetration test results are shared under NDA on request.
{% endhint %}
## Hosting regions
Each customer's data is hosted in one region, chosen during account setup based on where users are located or where the organization's data residency requirements point. Data is fully separated between regions.
| Region | Cloud provider | Location | Azure region name |
|---|
| EU | Microsoft Azure | Amsterdam, Netherlands | West Europe |
| US | Microsoft Azure | Virginia, USA | East US |
| UK | Microsoft Azure | London, UK | UK South |
Once set, the region does not change unless the account is migrated, which requires coordination with the Userlane team. The subprocessor list is the contractual source of truth for which region hosts a given customer's data.
## Requesting evidence
Several security documents are available on request. These are shared under NDA through the Userlane account team:
* The ISO/IEC 27001:2022 certificate
* The penetration test report
* The detailed data flow diagram
* Completed security questionnaire responses
To request any of these, reach out to the Userlane account team or through the [Trust Center](https://www.userlane.com/trust-center/).
## Related articles
TBA
## FAQ
Where does Userlane host customer data?
Microsoft Azure. Three regions are available: EU (Amsterdam, Netherlands), US (Virginia, USA), and UK (London, UK). The region is chosen during account setup and contractually held.
Can the hosting region be changed after setup?
Not without a migration. Contact the Userlane account team to discuss options.
[^1]: The subprocessor list is a contractual document that names every third-party service Userlane uses to process customer data, including the hosting provider and region. It is referenced by the data processing agreement.
[^2]: ISO/IEC 27001:2022 is an international standard for information security management systems. Certification means an accredited auditor has verified that the organization meets the standard's requirements.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://docs.userlane.com/security-and-privacy/hosting-and-certifications.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.