# Compliance

Foldspace meets enterprise-grade compliance standards — ISO 27001, SOC 2, and GDPR.

Foldspace is built for **enterprise-grade compliance**. Our security and data-handling practices are independently audited against the standards enterprises require.

## Certifications & standards

<div style="display: flex; flex-wrap: wrap; align-items: center; gap: 2.5rem; margin: 1.5rem 0 2rem;">
  <img class="cert-badge cert-badge--invertible" src="/badges/iso-27001.png" alt="ISO 27001 Information Security" height="96" />
  <img class="cert-badge" src="/badges/soc2.webp" alt="AICPA SOC 2" height="96" />
  <img class="cert-badge cert-badge--invertible" src="/badges/gdpr.png" alt="GDPR" height="96" />
</div>

<style>{`
  .cert-badge { height: 96px; width: auto; }
  [data-theme='dark'] .cert-badge--invertible { filter: invert(1); }
`}</style>

| Standard | What it covers |
| :--- | :--- |
| **ISO 27001** | Certified information security management — the controls governing how we protect information. |
| **SOC 2** | AICPA Service Organization Control reporting on security, availability, and confidentiality (formerly SAS 70). |
| **GDPR** | Compliance with the EU General Data Protection Regulation for handling personal data. |

## Data residency

Foldspace operates data centers in both the **United States** and the **European Union**, so you can keep customer data in the region your organization requires.

## Related

- [Data processing agreement](/privacy/dpa/): the terms under which Foldspace processes your data.
- [Data privacy policy](/privacy/data-privacy/): how we collect, use, and protect personal data.
- [PII Control](/privacy/pii-masking/): mask personally identifiable information per agent.

For security documentation or to request our reports, contact [support@foldspace.ai](mailto:support@foldspace.ai).

## 🇪🇺 EU support

Foldspace fully supports EU deployments:

- **Local EU data center** — data stays within the European Union.
- **EU-supported models** — run on EU-hosted models from Google Gemini and OpenAI.