All Factbird infrastructure is cloud based and primary on AWS. For a full list of sub processers see Data Processing Addendum (DPA). The AWS infrastructure is certified within a long list of of certifications (https://aws.amazon.com/compliance/programs/).
The Factbird organization and product is SOC2 Type 2 compliant, with the first audit conducted in December 2025.
More can be seen here: SOC 2 Type II Security and Compliance