Data Residency | REM Labs

Where your data lives

Four options, one promise: you decide.

Live US-East (primary)

All new accounts default to US-East-1. Vercel (global edge for the static site and CDN) + Supabase Postgres with pgvector (us-east-1) for memory storage. Railway (us-west) for compute workers.

Primary DB: Postgres + pgvector, us-east-1

Backups: Cross-region encrypted snapshots, 6-hour RPO

Compliance: GDPR-compliant processing via SCCs

2026-Q3 EU (Frankfurt)

Frankfurt (eu-central-1) for customers who need strict EEA data residency. Enterprise customers can provision an EU instance today on request; public availability planned Q3 2026.

Primary DB: Postgres + pgvector, eu-central-1

Cross-border transfers: None; data stays in the EEA

Join waitlist: legal@remlabs.ai

Available today Self-host

Run REM Labs on your own infrastructure. Docker image + Postgres (any version ≥ 14 with pgvector). Works in any region, any cloud, and fully air-gapped. Zero phone-home, no license keys, no telemetry.

Requirements: Docker, Postgres 14+, 512 MB RAM

Telemetry: None. The binary never contacts us.

Getting started: Self-host docs →

Enterprise Dedicated instance

Single-tenant deployment with the region of your choice. Customer-managed encryption keys (CMEK), private network peering, and signed DPA + BAA (healthcare). Uptime SLA 99.95% with financially-backed credits.

Regions available: US, EU, UK, Canada, Australia, Singapore, Japan

Isolation: Single-tenant compute + dedicated DB cluster

Start here: Talk to sales →

How residency works

What crosses a border, and what never does.

Memory content → stays in your region.

Memories you submit are written to the primary database in your region. Backups are encrypted and stored in the same region (or cross-region if you opt in).

Embeddings → processed by the model vendor; content never retained by vendor.

Embedding calls to OpenAI or Anthropic go over TLS. Per their API terms, inputs are not used for training and are not retained beyond the immediate request. If you need fully-on-prem embeddings, use the self-host option with a local model.

Static site assets → served from global edge CDN.

The website you're reading is cached globally for performance. No user data is served from the edge — only public HTML/CSS/JS.

Audit logs → stay in your region.

Every mutation is written to a region-local audit log. Enterprise customers can mirror to their own SIEM via webhook.

Need a specific region?

Tell us where you need to be.

We prioritize our region roadmap based on customer demand. If you need a region we don't list today, email legal@remlabs.ai and we'll tell you the exact timeline (or spin up a dedicated enterprise instance now).

Talk to sales Self-host guide Security overview

Your data stays where you need it.