Privacy & Trust
Secure privacy-first analytics. GDPR and CCPA compliant by design.
Data Storage & Residency
Analytics and configuration data is stored in EU data centers by default.
Data Center Locations
EU_WEST_1US_EAST_1Xreos (dba. Grain): US-based company with EU-first infrastructure. All new tenants created in EU West by default. Encrypted at rest (AES-256) and in transit (TLS 1.3).
Built for Privacy
Six principles that guide every decision we make
Cookieless by Default
Ephemeral session IDs in memory only. No persistent tracking until consent granted.
Consent Management
Opt-in and opt-out modes with automatic upgrade flow and full audit trail.
Data Minimization
Minimal data before consent. Query params stripped to prevent PII leakage.
IP Anonymization
Optional IP masking removes the last octet before storage. All data encrypted in transit with TLS 1.3.
Retention Control
30-365 days configurable retention. Automatic deletion with export option.
User Rights
Export, delete, anonymize via API or dashboard. Complete audit logs.
How It Works
Progressive tracking that respects user choice
A _grain_consent_granted event maps ephemeral to persistent IDs
Regulatory Compliance
Ready for GDPR and CCPA out of the box
EU Ready
Full GDPR compliance with data minimization, consent management, and user rights.
California Compliant
CCPA compliance with opt-out mechanisms and data disclosure.
Multi-Tenant Isolation
Complete data separation at every layer
Database-Level Separation
UUID-based tenant partitioning in Cassandra ensures complete isolation. Each tenant's data is stored in separate partitions with no shared access.
Event Storage Isolation
ClickHouse enforces tenant_id filtering on all queries. Cross-tenant data access is architecturally impossible.
Authentication Contexts
Separate authentication contexts per tenant with JWT validation. Auth0 integration ensures identity isolation.
Encryption & Data Protection
End-to-end encryption for data in transit and at rest
In Transit
At Rest
Backup & Disaster Recovery
Automated backups with guaranteed recovery objectives
Tenant Database
Tenants, teams, remote config data, user properties, and settings.
Analytics Database
All events and metadata.
Infrastructure
Trusted partners for specific services
Auth0
Authentication & authorization
Azure
Workloads, storage, and networking
Cloudflare
CDN, DDoS protection, SSL
AWS
Transactional email delivery
Stripe
Payment processing
Intercom
Customer support
Security Contact
Report security vulnerabilities or concerns to our dedicated security team.
System Status & Uptime
Real-time monitoring of all services with historical uptime data and incident reports.
Visit Status PageIncident Response Commitments
Transparent communication during security incidents
GDPR Compliance
72-hour notification to data controllers for personal data breaches (GDPR Article 33)
Tenant Notification
Direct email notification to affected tenants with detailed incident reports
Public Disclosure
Transparent public incident disclosure for major security events
Start Building with Privacy
Track user journeys without compromising on privacy or compliance.
Free forever • 15,000 active users per month • No credit card required