Where your requests run
Dropstone's servers and the inference providers that run its models are hosted in the United States. Requests are never routed through providers outside the US. What that means for your data.
Where a request is processed matters for who could have access to it and which laws apply. Dropstone keeps this simple.
United States, only
Dropstone's own systems run in the United States. That includes the servers that receive your requests, the storage that holds your account, conversations, projects, and memory, and the systems that meter usage.
The inference providers that run Dropstone's models are US-hosted. Dropstone routes model requests only to providers in the United States, and this is enforced in how requests are made, not left to a default. A request from Dropstone is never sent to a provider outside the US.
This applies to every model, every surface, and every plan.
Why it is fixed rather than optional
Some products let the model provider choose where to run a request, or route to whichever region is cheapest at the moment. Dropstone does not, because the answer to "where did my data go" should not change from one request to the next. Every request goes to the same kind of place, and you can rely on it.
What the providers keep
Nothing. The providers are under contract to discard inputs and outputs immediately after generating a response. What is retained is retained by Dropstone, on Dropstone's systems, under the terms in How Dropstone handles your data.
Data in transit
Every request between you and Dropstone, and between Dropstone and a provider, is encrypted with TLS 1.3. Internal calls between Dropstone's own services run inside an isolated private network.
The CLI
The CLI runs on your machine and reads your files there. Nothing is uploaded except what is needed to answer your request: the parts of files it is working on and your messages. Session history is kept locally on your machine. When the CLI makes a request, the same US-only routing applies.
Regions outside the US
Dropstone is available to use from anywhere. Your requests travel to the US to be processed and the response returns to you. Billing supports US dollars and Indian rupees. There is no option to keep processing within another region at present.
If your organization has a data residency requirement, contact us to discuss it.