Data Hosting & Sovereignty
Our Commitment
Australian hosting is our standing default. Client and member data across Agend products is hosted and stored in Australia unless expressly disclosed otherwise on this page.
Some supporting services process limited data globally or overseas — including content-delivery and bot-protection layers, and the business and administrative systems listed below. Where processing occurs outside Australia, it is identified in the sub-processor tables on this page and handled in accordance with the Australian Privacy Principles, including APP 8. Our Data Processing Agreement sets out the notice and objection rights that apply, and the steps we take in respect of overseas disclosure.
Agend Pro (WordPress)
Agend Pro is hosted on Kinsta, running on Google Cloud Platform infrastructure. Client data — including backups — is stored in Australian data centres (Sydney/Melbourne). See Agend Pro Security Framework for hosting-environment detail.
Agend Product Suite
Agend Product Suite's database, authentication, and file storage run on Supabase, hosted in AWS Asia Pacific (Sydney). Application hosting (Vercel) and error/anomaly monitoring (Sentry) are also confirmed Australia-region. See Platform Security for architecture detail.
Email delivery residency for Agend Product Suite customer accounts is enforced at the infrastructure level: non-AU-capable email providers are not permitted, and Australia-capable providers are used for transactional email sent from the Suite.
Backup & Recovery
| Retention | Recovery Point Objective (RPO) | Recovery Time Objective (RTO) | |
|---|---|---|---|
| Agend Pro | 30-day rolling backups | Daily | ~3 hours (business hours) |
| Agend Product Suite | 30-day rolling backups | 24 hours | 8 business hours |
Availability
Our contractual availability commitment for the Agend platform is 99.5% monthly availability, as set out in the Service Level Agreement, with service credits available if we fall short. Our internal operational targets are higher, but 99.5% is the figure we commit to.
Data Export & Deletion
On termination or expiry of services, data is made available for export before deletion. Personal data is deleted or de-identified within 90 days. Financial records (e.g. invoices) are retained for 7 years in line with Australian tax obligations. Overseas disclosure of data occurs only as necessary to provide the service and only via providers disclosed in our sub-processor list below — consistent with Australian Privacy Principle 8 (APP 8).
Sub-processors
The tables below list the third parties who may process customer data on our behalf, current as of August 2026. We update this register when sub-processors change; the Data Processing Agreement sets out the applicable notice and objection rights.
Core (all customers)
| Sub-processor | Purpose | Region | Certifications |
|---|---|---|---|
| Supabase | Database, authentication, file storage | AWS Asia Pacific (Sydney), Australia | SOC 2 Type II, ISO 27001 |
| Vercel | Application hosting | Australia | SOC 2 Type II |
| Sentry | Error & anomaly monitoring | Australia | SOC 2 |
| Cloudflare | Bot/CAPTCHA protection (Turnstile) | Global (protection layer only — no customer database content is stored with Cloudflare) | SOC 2, ISO 27001 |
Payments (customers taking payments)
| Sub-processor | Purpose | Certifications |
|---|---|---|
| Stripe | Payment processing | PCI DSS Level 1, SOC 2 |
| eWay (Global Payments) | Payment processing | PCI DSS Level 1 |
| Xero | Accounting reconciliation | ISO 27001, SOC 2 |
Feature-dependent
| Sub-processor | Purpose | Region | Status |
|---|---|---|---|
| SMTP2GO | Transactional email (Australian sub-accounts) | Australia | Active |
| Mailchimp | Email marketing (when connected by customer) | United States | Active when connected |
| Inngest | Background job orchestration | United States | Active |
Business and administrative systems
In addition to the product platforms above, Agend operates internal systems to administer client relationships — contracts, proposals, invoicing, support and project delivery. These process client organisation details and the business contact details of client personnel. They do not hold your members' records, which remain in the Australian product platforms listed above.
| System | Purpose | Region |
|---|---|---|
| Agend self-hosted infrastructure | Contract and client administration platform, including document storage | Australia |
| Resend | Transactional email for administrative notices (proposals, reports, notifications) | United States |
| Teamwork | Project management and time tracking | United States |
| Ignition | Proposal and engagement management | United States |
| Xero | Invoicing and accounts | Global |
| Anthropic | AI processing of internal operational records (see below) | United States |
Use of AI
Agend uses large language models from a third-party provider to classify internal timesheet entries, suggest project attribution for mis-booked time, summarise engineering pull requests, generate internal management reports, and — when a staff member requests it — draft introduction and conclusion text for a proposal.
The data sent is limited to internal operational records: timesheet descriptions, project and client organisation names, staff names and hours, and pull-request titles and summaries. Where a staff member requests proposal drafting, what is sent is the client's organisation name and industry and a description of the services being proposed. No named individuals, no contact details and no monetary values are included — that request is filtered before it leaves our systems, and the exclusion is enforced by automated tests.
We do not send your members' records, email content, or documents you upload to any AI provider. We do not use your data to train models. Our current AI sub-processor is listed above.
Administrative reporting via an AI assistant. Our internal contract administration platform exposes a read-only reporting interface that Agend staff may connect to an AI assistant. Queries run through it can return your organisation's name, the business contact details of your personnel held in that system, contract and proposal details, and invoice amounts and due dates. It cannot write to any system, and it does not reach your members' records, which are held in the product platforms listed above.
Note
Customer-initiated integrations you configure yourself (e.g. syncing to your own WordPress site) move data to and from systems you control, and are not Agend sub-processors.
Questions about data hosting, sovereignty, or sub-processors can be directed to [email protected].