Trust
Certification and compliance readiness.
PulsePigeon publishes readiness status without claiming active certifications before audits, agreements, or regional controls are complete.
Programs
SOC 2, ISO, DPA, residency, and HIPAA
SOC 2 Type IIreadiness
Control mapping, evidence collection, vendor risk review, and annual audit prep are tracked before formal audit.DPA, subprocessors, and SCCspublished policy
Customer DPA, public subprocessor list, and SCC transfer terms are prepared before enterprise contracting.ISO 27001roadmap
ISMS scope, risk register, statement of applicability, and internal audit cadence are prerequisites.Data residencyplanned
US default with EU and India residency gated on regional infrastructure and support coverage.HIPAA BAA tiergated
PHI is not permitted until a signed BAA, PHI handling controls, and support procedures are active.Subprocessors
Current vendor roster
HetznerHosting for our sending servers
EU (Helsinki, Finland)OVHcloudHosting for our sending servers
USCloudflareCDN, tunnel and edge security
GlobalAnthropic, OpenAISupport assistant and deliverability copilot models
USStripeBilling
Global payment processingGitHubSource control and CI
US/globalResidency
Regional availability
USdefault
Production control plane defaults here.EUplanned
Requires regional storage, routing, support, and DPA transfer review.Indiaplanned
Requires regional storage, routing, support, and data-retention review.