Where is MiOpsAI data stored and hosted?

MiOpsAI data is stored on SOC 2 Type II compliant infrastructure in the United States, on dedicated hardware managed by MiOpsAI, LLC. Every tenant operates on logically isolated database schemas with encrypted-at-rest storage and TLS 1.3 in transit. Regional hosting in EU and APAC is on the roadmap for Enterprise+ customers in 2026.

The infrastructure stack

• Primary hosting — US-based bare-metal servers in tier-3 working toward SOC 2 (on the 2026 roadmap; underlying AWS infra is SOC 2 Type II) data centers.
• Database — MySQL 8 with encrypted-at-rest tablespaces and TLS-required connections.
• File storage — encrypted at rest, served via signed time-limited URLs (no public buckets).
• Backups — daily full + hourly incremental, encrypted, retained 30 days, geo-replicated to a secondary US region.
• Edge and CDN — Cloudflare for DDoS protection, WAF, and edge caching of public assets only (never tenant data).

Encryption everywhere

1. At rest — AES-256 on database, file storage, and backup volumes.
2. In transit — TLS 1.3 minimum, modern cipher suites only, HSTS enforced.
3. Application secrets — managed via environment variables, never logged.
4. Per-tenant API keys — hashed before storage, rotated on demand from admin.

Data residency questions

• US-only customers — your data stays in the US, full stop.
• EU customers — currently hosted in the US under standard contractual clauses (SCCs); EU regional hosting coming in 2026 for Enterprise+ tiers.
• Canadian customers — covered by US-Canada cross-border data flow under existing trade frameworks.
• UK customers — covered under the UK-US Data Bridge.

Compliance posture

SOC 2 Type II audit underway, completion expected mid-2026. GDPR-compliant data subject request workflows built into admin. CCPA-compliant. Not currently HIPAA-certified — we do not recommend MiOpsAI for storing PHI today. Plans from $199/month. Request access for a security review packet.