Where your data lives
Your data is hosted in Canada, on SOC 2 Type II compliant infrastructure.
You are holding other people's tax documents. Where those sit is a fair question, and it should have a short answer.
In Canada
Your data is hosted in Canada.
For a Canadian firm handling Canadian clients' financial records, that is usually the answer that matters, and it is often the first thing a client asks.
The infrastructure
Vylan is built on SOC 2 Type II compliant infrastructure. Your database and your clients' uploaded files live on Supabase, in a Canadian region.
Type II is the distinction worth knowing if a client's own auditor asks. A Type I report says the controls were designed properly on one day. Type II says they were tested and held over a period of time.
Getting it back
You can download everything your firm has, whenever you want, without asking us. See downloading all your data.
If a client or a regulator needs more detail than this page gives, write to hello@vylan.app and you will get a straight answer from a person.